5. Change the directory to the folder you created.
6. Copy the custom openssl script to your folder.
Example: Custom Openssl Script
#!/bin/bash workdir=/tmp/sslgenwd
keyfile="serverkey.key"
crtfile="servercrt.crt"
pcksfile="serverpcks.p12"
pemfile="server.pem"
logfile="sslupwd.log"
installdir="C:\Users\emily2938\Desktop\Certificates"
dstkeyfile="serverkey.pem"
dstpemfile="server.pem"
p12filepw=123456
if [ $# -lt 6 ];then echo "1" > voutf exit 1 fi
subjarg="//C=$5\ST=$4\L=$3\O=$2\CN=$1\emailAddress=$6"
if [ ! -d $workdir ]; then mkdir $workdir fi
cd $workdir
echo -e "#STEP 1: Generate a key"
openssl genrsa -out $keyfile 1024
if [ $? -ne 0 ];then echo "1" > voutf exit 1 fi
echo -e "\n#STEP 2: Generate the self-signed certificate"
openssl req -new -x509 -key $keyfile -out $crtfile -days 3650 -subj $subjarg
if [ $? -ne 0 ];then echo "1" > voutf exit 1 fi
echo -e "\n#STEP 3: Combine key and crt into pem"
openssl pkcs12 -export -in $crtfile -inkey $keyfile -out $pcksfile -passout pass:$p12filepw
if [ $? -ne 0 ];then echo "1" > voutf exit 1 fi
openssl pkcs12 -in $pcksfile -nodes -out $pemfile -passin pass:$p12filepw
if [ $? -ne 0 ];then echo "1" > voutf exit 1 fi
echo -e "\n #STEP 4: Install file"
cp$workdir/$keyfile $installdir/$dstkeyfile -f
cp $workdir/$pemfile $installdir/$dstpemfile -f
#echo "0" > voutf#
rm $workdir -rfcd
7. Modify the PEM install path and days as desired in script and run the script.
8. Modify your parametric information and email address accordingly.
NOTE: The four steps should complete without error and two PEM files should be created in your folder. Ensure that
the RPC2 SNTP time is correct and in sync with the timestamp of the certificate.
9. In the application, from the side navigation bar of the System tab, click Manage Protocol - Web Server -
Certificate.
10. Select the Upload a New Certificate radio button and click Choose File to browse for the PEM file.
11. Click the Upload Certificate icon. If the process is successful, you are prompted to restart your screen.
12. Restart your system to complete the process.
3.7.6 Authentication
Authentication can be performed locally or on a remote Kerberos, LDAP, Radius or TACACS+ authentication server. If the
rack PDU is managed by an Avocent® DSView™ Management Software server, DSView™ server authentication is also
Vertiv | RPC2™ Communications Module Installer/User Guide | 30
To Next Page
Loading...
