Fujitsu Eternus DX80 S2 - SSH;SSL Security Configuration

Chapter 4 Function/System Settings and Display
4.3 Network Management
ETERNUS CLI User’s Guide
Copyright 2015 FUJITSU LIMITED P2X0-1030-09ENZ0
530
4.3.6 SSH/SSL Security Configuration
This section explains the commands related to setting up SSH/SSL security. The following items can be
configured:
• SSH server key
• SSL server key and self-signed certificate.
• SSL server key and certificate signed by certificate provider.
■ Summary of how to register SSL certification through CLI
There are two methods for SSL certification; a self-signed certificate and a certificate that is signed by the
certificate provider.
The steps involved in registering a certificate that is signed by the certificate provider using CLI are as follows:
Procedure
1 Generate and export Certificate Signing Request (CSR).
Use the "create ssl-certificate-request" command to generate and export a CSR for a signed certificate
from the certificate provider. This command generates and exports a CSR and a server key. The server
key should be hidden from other keys.
2 Send CSR to certificate provider and receive signed certificate.
Send the exported CSR to the certificate provider to sign. A signed certificate will be returned from the
provider.
3 Register the signed certificate.
To register, use the "import ssl-certificate" command to import the received signed certificate and the
server key generated in Step 1
.
End of procedure
Use the "create ssl-certificate" command to register a self-signed certificate.