Service manual

52 Cyclades ACS 5000 Advanced Console Server Command Reference Guide
To generate a self-signed certificate:
1. Open the /etc/req_key file and update the user data with your organization specific data.
2. Remove the files /etc/ca/*.pem
3. Execute the following script.
# /bin/firstkssl.sh
4. Reboot the console server or restart web manager.
X.509 certificate on SSH
The OpenSSH software included with the console server has support for X.509 certificates. The
administrator must activate and configure SSH to use X.509.
# vi /etc/req_key
[ req ]
default_bits = 1024
distinguished_name = cyclades
prompt = no
x509_extensions = x509v3
[ cyclades ]
C = US
ST = CA
L = Fremont
O = Cyclades Corporation
OU = R&D
CN = www.cyclades.com
emailAddress = [e-mail]
[ x509v3 ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints = CA:true
nsComment = "This is just a TEST certificate.
nsCertType = server, sslCA