Create SHA384 hub tunnel certificates for DX UIM 23.4.7 (CU7) and later — and why the hub GUI has no SHA option

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

How do I generate a SHA384 Certificate using hub 23.4.7 and later? 

Documentation states to "Ensure settings are set "SHA384" but I don't see any option

 

Troubleshooting Hub Tunnels

Environment

DX UIM 23.4.7 and later

Cause

Documentation Clarification

Resolution

In hub GUI There is no SHA384 setting to change.

 

Hubs 23.4.7 and later sign every certificate it generates with SHA384 and the GUI offers no choice.

You get a SHA384 certificate by regenerating it:

1. Open the hub configuration, then Tunnels > Server Configuration.
   
   
2. Leave the Security Settings as they are. They only control the TLS cipher.
   
   
3. Regenerate the certificates with the CA and Server buttons. Issue client certificates with New
   
   
4. Copy the new certificate.pem to each tunnel client hub.

Additional Information

Related KB: 

• Validating tunnel certificate readiness for CU7 upgrade
• Hubs disconnected after upgrade from 23.4.3 to 23.4.8 or later (DX UIM)