Ssh/Ssl Security Configuration - Fujitsu ETERNUS DX80 S2 Cli User's Manual

Chapter 4 Function/System Settings and Display
4.3 Network Management
4.3.6

SSH/SSL Security Configuration

This section explains the commands related to setting up SSH/SSL security. The following items can be
configured:
• SSH server key
• SSL server key and self-signed certificate.
• SSL server key and certificate signed by certificate provider.
■ Summary of how to register SSL certification through CLI
There are two methods for SSL certification; a self-signed certificate and a certificate that is signed by the
certificate provider.
The steps involved in registering a certificate that is signed by the certificate provider using CLI are as follows:
Procedure
1
Generate and export Certificate Signing Request (CSR).
Use the "create ssl-certificate-request" command to generate and export a CSR for a signed certificate
from the certificate provider. This command generates and exports a CSR and a server key. The server
key should be hidden from other keys.
2
Send CSR to certificate provider and receive signed certificate.
Send the exported CSR to the certificate provider to sign. A signed certificate will be returned from the
provider.
3
Register the signed certificate.
To register, use the "import ssl-certificate" command to import the received signed certificate and the
server key generated in
Use the "create ssl-certificate" command to register a self-signed certificate.
Step 1.
530
ETERNUS CLI User's Guide
Copyright 2015 FUJITSU LIMITED
End of procedure
P2X0-1030-09ENZ0