02/10/2019 | Storage | No Comments
Having a webbased app running over unsecured protocols like HTTP, might not only be unsafe but also unprofessional. Therefore, most of the enterprises opt for a secure traffic over HTTPS. 3PAR StoreServ Service Processors run by default over unsecured http protocol. Installing a SSL Certificate is something every administrator should consider.
A technical whitepaper of Best Practices for implementing HPE 3PAR Service Processor can be found here.
Creating a Certificate File Request
- Navigate to your Service Processor webpage https://<sp_name>
- Log in with you customer credentials
- On the left pane, click on Support > SP Certificate
- On this page, click on Generate CSR
- Enter your information, including certificat’s Common Name and SAN (Subject Alternate Names)
Adding a SAN record is very important as recent web browsers still give errors when a certificate does not contain this information.
- Click on Generate CSR and return to previous window.
- On the next step click on Export CSR
- After exporting the file, click on Download File and save it locally
Signing and importing the SSL Certificate
At this point we have created a request file which will be signed by our Certificate Authority. In large enterprises certificate handling is done by a separate departement. You could also give a try by yourself. Here is a good article about signing certificates with Microsoft CA.
Once you have signed your certificate, you will get a file with .cer as extension.
- Navigate to your service processor’s webpage and select Import Certificate
- On the first step we’re going to load the SP’s certificate we have just signed in the previous step.
(Note the sequence)
- Browse the certificat’s location and click on Load Certificate
- On the following screen we are going to load the intermediate certificate of the CA or the Issuing Certificate.
- Finally, we will upload the Root Certificate. Browse the file and click on Import Certificate.
- Once the 3rd certificate (the certificate from the previous step) the Web Service of the Service Processor will restart.
- Make sure to close any active browser before navigating again to the service processor
- Next time you navigate to the array’s SP the SSL certificate should be valid.
For any questions, feel free to contact us.3PAR, Service Processor, SSL, StoreServ