UCS Central untrusted cert with UCSM

[dncrchic2000]

I am using the default keyring in UCSM & have installed this cert to my trusted root certs. The problem I am seeing is that everytime I go to view the fault summary tab within UCS Central & click on my UCSM, it pops up the warning "UCSM Communication Error". When I proceed to accept the certificate it tells me

"You attempted to reach X.X.X.X, but instead you actually reached a server identifying itself as Hostname"

My question is, why is UCS Central trying to connect to the IP instead of the hostname? Do I have something configured incorrectly? Or is this a bug of the first release?

[jgarlock9999]

I have the same issue.  UCS Central redirects to the IP so all my certs are no good.  Will this be addressed?

Second, I don't see any way to apply my own certs

[padramas]

Hello Jon,

Can you please screen shot of the error message ?

Make sure that you have have accepted the UCSM cert an  trusted root certs in your web browser.

Padma

[jgarlock9999]

I think I explained wrong.  I don't have any issues with the self signed cert used by UCSC.  I'd like to apply our own cert.  I don't think we can do that so I don't have anything to screenshot.

Then there's launching UCSM from within UCSC.  It launches to an IP url, which is probably the lowest common denominator safest, but defeats the purpose of using the certs in the first place.  Even if you do accept those self signed certs, you're going to get warned that the site you're going to doesn't match the URL.

[padramas]

Hello Jon,

Currently UCS central only uses default self-signed certificate and does not support third party signed certificates.

You can track the enhancement request via this defect

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCuh06347

*NOTE* It will take a while to get published on cisco.com website.

For the second issue, I would suggest you to open a TAC service request to investigate why it uses IP address instead of name.

Padma

[jgarlock9999]

I wasn't going to .. I had assumed it was "normal" behaivor.  Is that not the case?  I will open a TAC case.