Server Certificates -

[getwithrob]

Can someone explain the process for creating/uploading SSL server certificates to a CiscoWorks server?

[Joe Clarke]

Which type of certificates? CiscoWorks supports both self-signed and CA signed. You should also mention your version of CiscoWorks as the procedure differs between versions. General help for creating self-signed certificates is available in the context-sensitive online help. For example, for LMS 2.5, this can be found at:

http://server-url/help/cmf/sysadmin_self_sign_cert.html

[getwithrob]

RME 3.5 -

I think these are self-signed but 'am not sure....

I will take a look at the context sensitive help tomorrow.

[Joe Clarke · Accepted solution]

Self-signed are the cheap ones (i.e. free). You'd know if you were using CA-signed as you would have to have sent a sign request file off to a CA like Verisign (and they would have charged you for the result). For LMS 2.2, the documentation for self-signed certs can be found at:

http://server-url/help/security/sec_self_signed_cert.htm

[getwithrob]

I had 2 problems.

The 1st which came up showing invalid hostname was easy to fix. I had the URL as https://:1742. I simply needed to change the URL to https://:1742.

The 2nd message was for an expired server certificate. These files reside in /opt/CSCOpx/objects/web/conf/server.*

*Disable SSL under Server Configuration> Admin> Security Mgmt > Enable/Disable SSL

*dmgtd stop and start

*login to the browser using http://:1741

*Create a new certificate under Server Configuration> Admin> Security Mgmt > Create Self Siged Certificates

*Stop and start dmgtd

*Access the browser using https://:1742

[getwithrob]

I left 5 out of the previous post:

1)Disable SSL under Server Configuration> Admin> Security Mgmt > Enable/Disable SSL

2)dmgtd stop and start

3)login to the browser using http://:1741

4)Create a new certificate under Server Configuration> Admin> Security Mgmt > Create Self Siged Certificates

5)Enable SSL under Server Configuration> Admin> Security Mgmt > Enable/Disable SSL

6)Stop and start dmgtd

7)Access the browser using https://:1742