Configuring Custom Certificates for Management Center UI
There is a requirement that is needed when generating a certificate to use for the Management Center GUI.
After the certificate is generated, two more requirements must be met.
NOTE: The following example uses a Microsoft CA for generating the certificate. This example is a general guideline. The steps may differ depending on the CA version and other factors.
Noting that the process creates new CSR on the dafult Certificate Used by Management Center then replaces the Cert that way.
Enter the certificate below and end it with a Ctrl-D
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
A certificate already exists for keyring default. Would you like to replace it? (yes/no) [no]: yes
ok
# system-services restart management-center
Install the External Private Key into the Default Keyring
(config)# ssl inline keyring default
Enter the keyring below and end it with a Ctrl-D
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
ok
Install the External Certificate into the Default Keyring
(config)# ssl inline certificate default
Enter the certificate below and end it with a Ctrl-D
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
A certificate already exists for keyring default. Would you like to replace it? (yes/no) [no]: yes
ok
# system-services restart management-center