You must generate a certificate request and submit it to a certificate authority before uploading a custom self-signed certificate to the NDR.
To create a custom self-signed Web server certificate request:
Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1or
$ ssh npadmin@exampleFQDNEnter privileged mode:
npadmin@ia> enableEnter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>Enter configuration mode:
npadmin@ia# configure systemEnter the Web server certificate configuration menu.
npadmin@ia(config)# certificatesEnter
1. The custom certificate configuration menu appears.Enter
1to open the certificate signing request (CSR) settings. You see a menu similar to the following:Country Name (2 letter code) []:State or Province Name (full name) []:Locality Name (eg, city) []:Organization Name (eg, company) []:Organizational Unit Name (eg, section) []:Common Name (eg, fully qualified host name) []:Email Address []: Key Size []:Enter the information required of each setting. However, if
Key Size [] is left empty, the generated private key size defaults to 2048, which meets the security requirements defined by the National Institute of Standards and Technology (NIST).Enter
Yto confirm the CSR settings are correct. A PEM-encoded request is generated by the system.Copy and paste the PEM-encoded request into a text file and submit the request to a certificate authority.