Skip to main content

Generating a customized externally-signed server certificate

When installing the customized server certificate in Lenovo XClarity Integrator, you shall provide the certificate bundle that contains the entire CA signing chain.

Before you begin

If the new server certificate is not signed by a trusted international third party, a security message will be displayed the next time you connect to Add-in. To avoid the security message, check the Trust the certificate permanently and click Next.

Procedure

  1. Generate the Certificate Signing Request (CSR) for Lenovo XClarity Integrator.
    1. Select Server Certificate to display the Server Certificate page.
    2. Click the Generate Certificate Signing Request (CSR) tab.
    3. Fill in all fields in the Generate Certificate Signing Request (CSR) page, including Country, State or Province, City or Locality, Organization, Organization Unit (optional) and Common Name.
      Note
      Select a common name that matches the host name of Lenovo XClarity Integrator. If a wrong value is selected, the connection will be untrusted. You can allow Lenovo XClarity Integrator to generate the common name automatically by keeping the default value Generated by LXCI.
    4. Select Generate CSR File to download the generated file.
  2. Submit all CSRs to your trusted CA for signing. The trusted CA returns a certificate bundle for each CSR. The certificate bundle contains the signed certificate and the complete certificate authority (CA) chain of trust.
  3. Upload the externally-signed server certificate to Lenovo XClarity Integrator.
    Note
    Create the uploading certificate in the CSR that recently created by clicking the Generate CSR File button. The uploaded file shall contain the complete certificate chain, including the root certificates and the intermediate certificates. The priority of certificates shall be: server certificate, intermediate certificates, and root certificate.
    1. Click Security Settings in the Lenovo XClarity Integrator menu.
    2. Click Server Certificate on the setting page.
    3. Click Upload Certificate to upload the certificate file (.cer).
      Note
      Restart the System Center Virtual Machine Manager after the new server certificate is uploaded.