如何为 Active 生成和转换签名证书 IQ Unified Manager

适用场景

• Active IQ Unified Manager (AIQUM)
• OnCommand统一管理器(OCUM)

问题描述

如何生成CA签名的证书并将其安装到Active IQ Unified Manager中

• 要求
  • 签名证书的 .pem 格式必须为
    • .cer  .pem 无法从重命名为
  • 证书链必须包含服务器证书、一个或多个中间证书和根证书
  • 证书链必须按 服务器、中间、根 顺序自上而下
  • 从AIQUM 9.9RC1及更高版本开始、支持远程生成CSR
• 常见错误

Failed to install certificate: A valid full certificate chain from the host certificate to the Certificate Authority's certificate must be provided.

Failed to install certificate: Input certificate's public key differs from the existing certificate's public key. The keys must match.