UCSPM 2.0 SSL Cert Replacement

[Paul O'Leary]

Anyone replaced the default ucspm.XXXXX SSL Certificate in a UCSPM 2.0 install?

I found the following on Zenoss, but the Cisco Docs have nothing to say about it:

How to configure SSL for Control Center and Zenoss 5.x to prevent browser untrusted connection error – Zenoss

[Paul O'Leary]

For those playing at home. Here's the openssl commands to make the key / csr.

I used an Active Directory PKI to make my 2048 cert and then the last openssl command to convert from p7b to cut:

openssl genrsa -out ucspm2.key 2048

openssl req -new -key ucspm.key2 -out ucspm2.csr

openssl pkcs7 -print_certs -in ucspm2.p7b -out ucspm2.cer

Used the console interface and pasted into Putty and no problem.