Differences

This shows you the differences between two versions of the page.

--- cluster:226 [2025/03/10 16:25] – [Update 13] hmeij07
+++ cluster:226 [2025/10/02 18:05] (current) – [CAs & Certs] hmeij07
@@ Line 177: / Line 177: @@
 ==== CAs & Certs ====
-  * Generate a CSR, insert year in Name
+  * Generate a CSR
-  * then...
+    * System > Certificates > Add
-  * download inCommon
+    * name hpcma_2024_CSR
-    * Issuing CA certificates only:
+    * Interenal Certificat, pull down select Certificate Signing Reques
-    * as Root/Intermediate(s) only, PEM encoded (first one in chain section)
+    * fill in Certificate Subject items
-  * menu CAs > import CA
+    * common name: hpcm40eth0vpi.wesleyan.edu
-  * copy all info into public
+    * alternates: (hit "enter" after each, "buttons" appear)
-  * menu Certs > import a cert
+      * hpcm40eth0c1.wesleyan.edu, hpcm40eth0c2.wesleyan.edu,
-    * signing auth, point to the CSR
+      * hpcm40ipmic1.wesleyan.edu, hpcm40ipmic2.wesleyan.edu
-    * as Certificate only, PEM encoded (first one in certs format)
+  * then...View CSR, copy the private key (bottom) into notepad
-    * copy in public
+  * then...View CSR, copy signing request (top), send to InCommon admin
-  * don't click http -> https s0 you don't get locked out
-  * when cert expires on you, just access https
+Your SSL certificate for hpcm40eth0vpi.wesleyan.edu is ready
+  * Download "as Root/Intermediate(s) only, PEM encoded" in "Issuing CA certificates only:" section
+   * first link in that section
+   * open hpcm40eth0vpi_wesleyan_edu_interm.cer in Notepad
+  * System > CAs >  Add
+    * name is InCommon_2024, next pull down menu select "Import CA"
+    * copy all content of _interm.cer file info into "certificate"  box
+    * "private key" box leave empty
+  * Download " "as Certificate only, PEM encoded"
+    *  First link "Available formats:"
+    * open file hpcm40eth0vpi_wesleyan_edu_cert.cer in Notepad
+  * System > Certificates > Add
+    * name is hpcma_2024_cert, next pull down menu select "Import Certificate"
+    * click "CSR exist onthis system", select CSR in pull down menu
+    * in "certificate" box copy contents of hpcm40eth0vpi_wesleyan_edu_cert.cer
+    * [NO] in "private key" box copy contents of CSR private key (first tab in Notepad)
+    * private key box remains empty, Submit, View and private key is filled in
+  * System > General
+    * pull down the new cert
+    * don't click http -> https s0 you don't get locked out
+    * Save and in popup box click "Restart Web Service"
 ==== Update 13 ====
@@ Line 217: / Line 240: @@
   * no problems
+  * standby reboot took a little longer, about 12 mins.
+.0-U6.8  08/05/2025
+  * download and standby reboot inside 10 mins
+  * fail over 1 min
+  * click HA disable for status booting other server
+  * after 3 mins, pending upgrade continue
+  * after 10 1/2 mins HA enabled
+  * yea
 \\
 **[[cluster:0|Back]]**