Hitachi VSP Gx00 series User Manual

into your certificate request. What you are about to enter is what is
c
alled a Distinguished Name or a DN.
\openssl\bin\openssl.cfg -out server.csr
For some fields there will be a default value.
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:Kanagawa
Locality Name (eg, city) []:Odawara
Organization Name (eg, company) [Internet Widgits Pty Ltd]:Hitachi
Organization Unit Name (eg, section) []:ITPD
Common Name (eg, YOUR name) []:192.168.0.1
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
Obtaining a signed certificate
After creating a private key and public key, obtain a signed public key certicate le. You
can use any of these methods to obtain a signed certicate le.
■
Cr
eate a
certicate by self-signing. See
Obtaining a self-signed certicate (on
page 149) .
■
Obtain a certicate from the certicate authority that is used by your company.
■
Request an ocial
certicate from an SSL certicate authority. See
Obtaining a signed
and trusted certicate (on page 149) .
Note:
When you send a r
equest to a certicate authority, specify the SVP as the host
name.
Hitachi recommends that self-signed certicates be used only for testing
encrypted communication.
Obtaining a self-signed certificate
To obtain a self-signed certicate, open a command prompt and execute the following
command:
c:\key>c:\openssl\bin\openssl x509 -req -sha256 -days 10000 -in
server.csr -signkey server.key -out server.crt
Note: This command uses SHA-256 as a hash algorithm. MD5 or SHA-1 is not
r
ecommended for a hash algorithm due to its low security level.
This command creates a server.crt le in the c:\key folder, which is valid for 10,000
days. This is the signed private key, which is also referred to as a self-signed certicate.
Obtaining a signed and trusted certificate
To obtain a signed and trusted certicate, you must obtain a certicate signing request
(CSR), send that le to a Certicate Authority (CA), and request that the CA issue a signed
and trusted certicate. Each certicate authority has its own procedures and
Obtaining a signed certicate
Chapter 5: Setting up security
System Administrator Guide for VSP Gx00 models and VSP Fx00 models 149

Hitachi VSP Gx00 series Specifications

General

Brand	Hitachi
Model	VSP Gx00 series
Category	Storage
Language	English