3PAR InForm® OS 2.3.1 CLI Administrator's Manual (320-200180 Rev B, February 2010)

4.20
LDAP Connection
3PAR InForm CLI Administrator’s Manual InForm OS Version 2.3.1
4.3.2.3 Configuring the CA Certificate
To configure the CA certificate:
1 Obtain the location of the CA certificate from the Active Directory server’s administrator.
2 If necessary, convert the certificate to
.cer file format. On a Windows system:
a Double-click the certificate.
b Select the Details tab.
c Click Copy to File....
d Click Next.
e Select Base-64 encoded x.5098 format.
f Click Next.
g Click Browse... and select a filename for the certificate (ending in the
.cer file
extension) and a folder in which the certificate will be stored.
h Click Next > Finish.
Or, use the
openssl x509 program.
3 Set the certificate using the
setauthparam ladp-ssl-cacert <certicate>
command, where <certificate> is the name of the certificate you previously located or
converted.
Example:
In the example above, the openssl x509 command is used to convert the CA certificate from
ca.crt format to ca.cer format, which can then be used with the setauthparam
command.
NOTE: If the certificate ends in the file extension .crt, it will need to be
converted to a form compatible with the
setauthparam command.
openssl x509 -inform DER -in ca.crt -outform PEM -out ca.cer