跳转到主内容

如何为 Active 生成和转换签名证书 IQ Unified Manager

Views:
24
Visibility:
Public
Votes:
0
Category:
oncommand-unified-manager
Specialty:
om
Last Updated:

适用于

  • OnCommand Performance Manager 2.x ( OCPM )
  • OnCommand Unified Manager 6.x ( OCUM )
  • OnCommand Unified Manager 7.x ( OCUM )
  • OnCommand Unified Manager 9.4 ( OCUM )
  • OnCommand Unified Manager 9.5 ( OCUM )
  • Active IQ Unified Manager 9.6 ( AIQUM )
  • Active IQ Unified Manager 9.7+ ( AIQUM )

说明

OnCommand Unified Manager ( UM )版本独立
OnCommand Performance Manager ( OPM )版本独立本指南介绍了在 UM 或 OPM 中生成并安装 CA 签名证书的过程、以及

如何解决在此过程中遇到的常见错误。

需要注意的事项:

  • 证书可以从 CA 服务器以多种格式签名和下载;但是, UM 和 OPM 期望签名证书.pem的格式为。
  • 下载链时,某些签名颁发机构可能不包括根证书或服务器证书。UM 和 OPM 期望该链包括服务器证书、一个或多个中间证书和根证书。
  • 证书在链中的放置顺序非常重要。UM 和 OPM 期望证书链按此顺序从上到下排列:服务器、中间、根。
  • UM 9.4 和 9.4P1 存在已知问题 - “备用名称”不能为空。错误 1164539 中对此进行了说明:在生成证书后、如果没有备用名称、并且在 UM 9.5 和更高版本中进行了修复、则不会加载设置 /HTTPS 证书页面。

尝试安装签名证书时可能会显示以下消息之一:

  • Failed to install certificate: A valid full certificate chain from the host certificate to the Certificate Authority's certificate must be provided.
  • Failed to install certificate: Input certificate's public key differs from the existing certificate's public key. The keys must match

     

 

CUSTOMER EXCLUSIVE CONTENT

Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support