System information

Administration Tasks Not Done in the Web Manager 75
Replacing the Self-Signed Certificate With an SSL Certificate for HTTPS
T To Replace the Self-Signed Certificate With
One From a Certificate Authority
1. Log into the OnBoard console as root.
2. Use openssl with the req parameter to create a private key and a
public CSR (certificate signing request).
Use the command line shown in the following screen example.
Note: The command line in the screen example is broken into two lines
because of space limitations. You can either enter the whole command on one
line or include a backslash (\) as shown to tell the shell that the command
continues on the following line.
The utility prompts for information. The required information is shown in the
following table. Any other requested information is not required.
The generated request automatically includes the public key.
[root@OnBoard /]# openssl req -new -nodes -keyout private.key -out \
public.csr
Table 2-1: Required Information When Creating a SSL Certificate Request
Prompt What You Enter
Country Name (2 letter code) [AU]: The country code consisting of two letters.
State or Province Name (full name) [Some-
State]:
The full name (not the postal abbreviation) of the
state.
Locality Name (e.g., city) []: The name of your city.
Organization Name (e.g., company) [Internet
Widgits Ltd]:
The organization for which you want to obtain
the certificate
Organizational Unit Name (e.g., section) []: The department or section
Common Name (e.g., your name or your server’s
hostname) []:
The name of the machine where the certificate
must be installed
Email Address []: Your email address or the administrator’s email
address