Cisco CIMC - Chain Certificate

[Netmart]

Hello,

In our environment combination of root and intermediate certificate is required.

However, so far I haven't seen any guide/document explaining how to do it. There is just word about public, self-signed, or internal. We tried to install intermediate and root by copy and paste both into one field, but it seems that the root is overwriting the intermediate one.

We have to chain both, intermediate and root [internal Cert].

I would appreciate any help.

Regards,

Martin

[Roger Kallberg]

Moving your post to a more appropriate section of the community as this is not related to anything within collaboration.

[Netmart]

Thank you, I hope someone is able to answer my question. So far Cisco Tech support has been pretty much a disappointment. I cannot believe that we are the only organization requiring the chaining of root and intermediate cert when it comes to CIMC..

[Roger Kallberg]

I don’t have all that much experience with CIMC, but normally you would upload the CA root and intermediate certificate’s individual to the trust store and then upload the signed certificate to the system. If you can share screenshots and outline what you have done it might be easier for someone to help you out.

[Netmart · Accepted solution]

Thank you Roger.

In our case we have to use chained cert [Root, intermediate, leaf].

And it seemed that the file size does play an important role:

The maximum file size supported for upload using this option is:

Up to 8 KB in Cisco UCS C-Series M5 servers

Up to 4 KB in Cisco UCS C-Series M4 servers

And for this reason SHA256 is chosen.

Up to 4 KB in Cisco UCS C-Series M4 servers