The 6.9.x Data Center Security (DCS) Certificate Utility

Products

• Data Center Security Monitoring Edition
• Data Center Security Server
• Data Center Security Server Advanced

Issue/Introduction

DCS by default uses self signed certificates for the User Interface and listeners. These are by default what the product is configured with.

If you are required to use a Trusted Signed Certificate or regenerate the Self-Signed Certificates this utility will assist in that creation.

Products supported
Symantec Data Center Security DCS 6.9.x 

Environment

DCS 6.9.x

Resolution

The DCS Certificate Utility is used for:

Creation of the Certificate Signing Requests needed for the umcserver.ssl, sss.ssl, server-cert.ssl and agent-cert.ssl keystores needed to issue Trusted Signed Certificates.
Importing of the Trusted Signed Certificates to the DCS Keystores.
Recreation of the self-signed certificates
Attached is the Utility and the Readme file.

Note: If DCS was installed using the IP Address, you must update the <DCS Installation Directory>\umc\umc.properties UMC_Server_IP field with the FQDN that was used with the DCS Certificate Utility.

Example of some umc.properties parameters:

UMC_SERVER_IP = machine1.example.com
UMC_SERVER_PORT = 8443
UMC_SERVER_SCHEME = https
UMC_SERVER_SERVICE = umcservices
UMC_SERVER_SERVICE_TOKEN_VALIDATION_API = /rest/v1.0/auth/token/validate

Note: This version is only for DCS 6.9.x