Skip to main content

SSL certificate management

This topic provides information about some of the actions that can be selected for certificate management with the SSL security protocol.

Click Security under BMC Configuration to configure the SSL certificate management.

When managing XClarity Controller certificates, you are presented with the following actions:
Download Signed Certificate
Use this link to download a copy of the currently installed certificate. The certificate can be downloaded in either PEM or DER format. The contents of the certificate can be viewed using a third-party tool such as OpenSSL (http://www.openssl.org). An example of the command line for viewing the contents of the certificate using OpenSSL would look something like the following:openssl x509 -in cert.der -inform DER -text
Download Certificate Signing Request (CSR)
Use this link to download a copy of the certificate signing request. The CSR can be downloaded in either PEM or DER format.
Generate Signed Certificate
Generate a self-signed certificate. After the operation is completed, SSL may be enabled using the new certificate.
Note
When performing the Generate Signed Certificate action, a Generate self-signed certificate for HTTPS window opens. You will be prompted to complete the required and optional fields. You must complete the required fields. Once you have entered your information, click Generate to complete the task.
Generate Certificate Signing Request (CSR)
Generate a certificate signing request (CSR). After the operation is completed, the CSR file may be downloaded and sent to a certificate authority (CA) for signing.
Note

When performing the Generate Certificate Signing Request (CSR) action, a Generate Certificate Signing Request for HTTPS window opens. You will be prompted to complete the required and optional fields. You must complete the required fields. Once you have entered your information, click Generate to complete the task.

Import a Signed Certificate
Use this to import a signed certificate. To obtain a signed certificate, a certificate signing request (CSR) must first be generated and sent to a certificate authority (CA).