Skip to main content

Resolve untrusted certificates during discovery

Untrusted certificates occur when a storage array attempts to establish a secure connection to ThinkSystem SAN Manager , but the connection fails to confirm as secure. During the array discovery process, you can resolve untrusted certificates by importing a certificate authority (CA) certificate (or CA-signed certificate) that has been issued by a trusted third party.

Before you begin

  • You must be logged in with a user profile that includes Security Admin permissions.

  • You have generated a certificate signing request (.CSR file) for each controller in the storage array, and sent it to the CA.

  • The CA returned trusted certificate files.

  • The certificate files are available on your local system.

About this task

You may need to install additional trusted CA certificates if any of the following are true:

  • You recently added a storage array

  • One or both certificates are expired

  • One or both certificates are revoked

  • One or both certificates are missing a root or intermediate certificate

  1. Select the check box next to any storage array that you want to resolve untrusted certificates for, and then select the Import button.
    A dialog box opens for importing the trusted certificate files.
  2. Click Browse to select the certificate files for the storage arrays.
    The file names display in the dialog box.
  3. Click Import .

    The files are uploaded and validated.

    Note
    Any storage array with untrusted certificate issues that are unresolved will not be added to SAN Manager .
  4. Click Next to proceed to the next step in the wizard.
  5. Go to Provide passwords .