Use the following procedure to upload and renew the web server connection certificate used for SSL/TLS communication between the management PC and the storage system.
During storage system maintenance, the maintenance PC is connected to the service port. The maintenance PC connection certificate used for communication between the maintenance PC and the storage system is created by the customer and given to maintenance personnel.
Note:
- For the requirements for the web server connection certificate to upload, see SSL/TLS communication between the storage system and the management PC.
- The certificate file to be uploaded to the storage system must be in one of the following formats:
- PKCS#12 format
- PEM format
- DER format
- If you use a certificate file in PEM format and a private key file together, convert the certificate file to PKCS#12 format (see Convert the SSL/TLS certificates to PKCS#12 format).
- If you want to upload a certificate in PEM or DER format, you must first create a private key and a CSR (public key) in advance by selecting Web Server for Purpose as described in Create a private key and a public key using the maintenance utility, and then prepare a signed certificate based on the CSR.
- If an intermediate certificate exists, prepare a signed public key certificate consisting of a certificate chain containing the intermediate certificate.
- The number of certificate chains to be uploaded must be 5 or fewer, including the root CA certificate.
- The public key cryptography of the certificate to be uploaded is RSA.
- Under Menu in the navigation tree (bottom left), click .
- Select the certificate to be renewed.
When you use VSP One Block Administrator, select Web Server.
When the maintenance personnel uses the maintenance PC (MPC) to maintain the storage system, select Web Server or Connect to MPC. Before maintenance work begins, select the relevant certificate.