Hitachi VSP Gx00 series User Manual

Converting SSL certificates to PKCS#12 format
Follow these instructions when converting SSL certicates to PKCS#12 format.
If you ar
e uploading a created private key and the SSL certicate, you need to convert it
to PKCS#12 format. If you are not uploading SSL certicate, conversion is not required.
Before you begin
■
You must store a private key and SSL certicate in the same folder.
■
In the following procedure:
●
The private key le name is “client.key”.
●
The SSL certicate le name is “client.crt”.
●
The SSL certicate in PKCS#12 format is output to c:\key.
Procedure
1. Open a command prompt with administrator permissions.
2. Enter the following command: C:key>c:\openssl\bin\openssl pkcs12 -
export -in client.crt –inkey client.key -out client.p12
3. Enter a password, which is used when uploading the SSL certicate in PKCS#12
format. Y
ou can use up to 128 alphanumeric characters and the following symbols: !
# $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~
4. The client.p12 le is created in the C:\key folder. This client.p12 le is the
SSL certicate in PKCS#12 format.
5. Close the command prompt.
Updating a signed certificate
To use SSL-encrypted communication, you must update and upload the private key and
the signed server certicate (public key) to the SVP.
Before you begin
■
You must have the Storage Administrator (Initial Conguration) role to perform this
task.
■
You must be logged into the SVP.
■
A private key (.key le) has been created. Make sure that the le name is server.key.
■
The passphrase for the private key (server.key le) is released.
■
A signed public k
ey certicate (.crt le) has been acquired. Make sure that the le
name is server.crt.
■
The private key (.key le) must be in PEM format. You cannot use DER format.
■
The signed public k
ey certicate (.crt le) must be in X509 PEM format. You cannot use
X509 DER format.
■
The passphrase for the private key (server.key le) must be released.
Procedure
1. Close all Device Manager - Storage Navigator sessions on the SVP.
2. Open a command prompt window with administrator permissions.
Converting SSL certicates to PKCS#12 format
Chapter 5: Setting up security
System Administrator Guide for VSP Gx00 models and VSP Fx00 models 151

Hitachi VSP Gx00 series Specifications

General

Brand	Hitachi
Model	VSP Gx00 series
Category	Storage
Language	English