Configure SSL

To generate a certificate, complete the following steps:

1. Enter values for

1. Country Name

2. State or Province

3. Locality

4. Company

5. Fully qualified domain name of the storage system

Note: You can also enter values for the optional Unit Name and Administrator Email fields.

2. Click Generate Certificates.
   
   It takes the storage system about a minute to generate a certificate.

From this window, you can see the certificate that you generated for this storage system. You can send this certificate to a certificate authority for signing or you can use a self-signed certificate. 

To send this certificate to a certificate authority for signing, complete the following steps:

1. Copy the entire contents of the certificate, including the begin and end statements.

2. Follow the certificate authority's procedures for sending a certificate to be signed.

To install a signed certificate, complete the following steps:

1. Copy the entire contents of the signed certificate file you received from the certificate authority into the text box.

Note: The contents of the signed certificate file includes the begin and end statements.

2. Click Install Certificate.

A self-signed certificate is one that you generate, but do not send to a certificate authority to be signed. The difference between a self-signed certificate and a certificate signed by a certificate authority is that the storage system is not authenticated when you use a self-signed certificate. You can use a self-signed certificate when configuring SSL.

To use a self-signed certificate to configure SSL, complete the following steps:

1. Click Generate Certificates.

2. Enter values for

1. Country Name

2. State or Province

3. Locality

4. Company

5. Fully qualified domain name of the storage system

Note: You can also enter values for the optional Unit Name and Administrator Email fields.

3. Click Generate Certificates.
   
   It takes the storage system about a minute to generate a certificate.

4. Click SSL > Enable/Disable.

5. Click Enable SSL.

A certificate authority (CA)-signed certificate is one that you generate and  send to a certificate authority to be signed before installing it on your storage system. Using a CA-signed certificate encrypts data and authenticates the storage system.

To use a CA-signed certificate to configure SSL, complete the following steps:

1. Click Generate Certificates.

2. Enter values for Country, state or province, locality, organization, and fully qualified domain name of the storage system.

3. Click Generate Certificates.
   
   It takes the storage system about a minute to generate a certificate.

2. Click View Certificate Signing Request.

1. Copy the certificate from the View Certificate Signing Request window.
   
   Include the begin and end statements.

2. Send the certificate to a certificate authority.
   Follow their instructions for sending the certificate.

3. Click Install Signed Server Certificate.

1. Copy the certificate sent to you from the certificate authority. Include the begin and end statements.

2. Paste the certificate in the text box.

4. Click Install Certificate.

You should reinitialize SSL if you change the domain name of the storage system because this makes the domain name recorded in the certificate obsolete. The result is that the connection is still encrypted, but the storage system is not authenticated.

To reinitialize SSL, complete the steps under Configuring SSL using a CA-signed certificate.