Skip to main content

SSL Certificate Cannot Be Trusted

The certificate chain might contain a signature that is self-signed or does not originate from a known Certificate Authority.

Each Lenovo XClarity Orchestrator instance has a unique, internally generated Certificate Authority (CA). By default, port 43 (used for communication between the user and virtual appliance or between the managed resources and virtual appliance) uses a certificate that is signed by that CA. If the SSL certificate cannot be trusted, generate and deploy a customized externally-signed server certificate to XClarity Orchestrator. For more information, see Working with security certificates.