Hi
Generating the Certificate
--------------------------
*********************************************************************************************
To generate a CSR, get it signed by a Certificate Authority (CA), and ready it for import:
*********************************************************************************************
Step 1 Log in to Prime Infrastructure using the command line, as explained in Connecting Via CLI. Do not enter “configure terminal” mode.
Step 2 At the prompt, enter the following command to generate the CSR:
ncs key genkey -newdn -csr test.csr repository defaultRepo
This will generate the CSR file “test.csr” in the Prime Infrastructure server’s default repository.
Step 3 Copy test.csr to a file storage resource to which you have all access rights. For example:
copy disk:/defaultRepo/test.csr ftp\://your.ftp.server.
Step 4 Submit the test.csr file to the third-party Certificate Authority for verification and signing. Depending on the CA, you may need to email the file, or paste its contents into a web form.
Step 5 You will receive the server and CA certificates from the CA. For example:
CN .cer - The server certificate. CN is replaced with the common name of the CA (e.g., “MyCompany CA”).
CA .cer - The CA certificate from the signing authority. You may receive more than one of these files, with various names.
Step 6 Copy all the certificate files from your file resource back to the default repository. For example:
copy ftp\://your.ftp.server/CN.cer disk:defaultRepo
copy ftp\://your.ftp.server/CA.cer disk:defaultRepo
You are now ready to import the certificates into the Prime Infrastructure server, as explained in Importing the Certificate to Prime Infrastructure
**************************************************
Importing the Certificate to Prime Infrastructure
**************************************************
Once you have received and prepared the signed CA certificate (as explained in Generating the Certificate), you must import it to the Prime Infrastructure server. If you are using Prime Infrastructure’s High Availability (HA) features, you will need to import it into both the primary and secondary servers.
Step 1 If you have not already done so, log in to Prime Infrastructure using the command line, as explained in Connecting Via CLI. Do not enter “configure terminal” mode.
Step 2 At the prompt, enter the following command to import the CA certificate file:
ncs key importcacert CA-Alias CA.cer repository defaultRepo
If you have more than one CA certificate file: Repeat this step for each CA cert file.
Step 3 Finally, import the CN.cer file into the server:
ncs key importsignedcert CN.cer repository defaultRepo
Step 4 Restart the Prime Infrastructure server to apply the changes:
ncs stop
ncs start
*************
Verification
*************
Go to online verification of the Certification Authority, try to access the PI with public IP/domain name
- Ashok
************************************************************************************************************
Please rate the useful post or mark as correct answer as it will help others looking for similar information
************************************************************************************************************
