OMIMSSC SSL Certificates
Dell EMC OMIMSSC appliance for SCOM uses certificates for secure HTTP access (HTTPS). By default, OMIMSSC installs and uses the self-signed certificate for the HTTPS secure transactions. For stronger security, it is recommended to use the Certificate Authority (CA) signed or custom certificates. The self-signed certificate is sufficient to establish an encrypted channel between web browsers and the server. The self-signed certificate cannot be used for authentication.
The Dell EMC OMIMSSC appliance uses the OpenSSL API to create the Certificate Signing Request (CSR). The RSA encryption standard with a 2048–bit key length is used. The CSR generated by OMIMSSC gets a digitally signed certificate from a trusted certification authority. The OMIMSSC uses the digital certificate to enable HTTPS on the web server for secure communication.
You can use the following types of certificates for OMIMSSC authentication:
- A self-signed certificate: OMIMSSC generates self-signed certificates when the hostname of the appliance changes.
- A signed certificate by a trusted Certificate Authority (CA) vendor.
NOTE: Consider company policies when creating certificates.
|
Generate a Certificate Signing Request (CSR)
Generating a new CSR prevents certificates that were created with the previously generated CSR from being uploaded to the appliance. To generate a CSR, do the following:
- On the OMIMSSC Admin Portal, expand the left pane and select .
- On the OMIMSSC SSL Certificates page, click Generate Certificate Signing Request.
- In the Generate Certificate Signing Request dialog box, enter the details such as Distinguished Name, Primary Subject Alternate Name, business name, department name, locality, state, country or region, and email address.
- Click Generate.
- Click Download, and then save the resulting CSR to an accessible location.
NOTE: In Internet Explorer, you must enable the option to allow file downloads. For more details, see
Unable to download Certificate Signing Request using Internet Explorer.
|
Upload a CA-signed certificate
Ensure that the certificate uses the PEM format.
You can use the HTTPS certificates for secure communication between the OMIMSSC appliance and host systems or OMIMSSC. To establish secure communication, send the CSR certificate to a certificate signing authority, and then upload the signed certificate using the OMIMSSC Admin Portal.
- On the OMIMSSC Admin Portal, expand the left pane and select .
- On the OMIMSSC SSL Certificates page, click Upload Certificate.
- Select Browse, and select the certificate.
- Click Upload.
NOTE: While the certificate is being uploaded, the OMIMSSC appliance may be unresponsive for a few minutes and the services are restarted. After the task is completed, it is recommended to close all existing browser sessions of OMIMSSC Admin Portal and Dell EMC OpenManage Integration Dashboard on the SCOM console. Log in again to the OMIMSSC Admin Portal to view the uploaded certificate.
|
Restore default certificate
- On the OMIMSSC Admin Portal, expand the left pane and select .
- On the OMIMSSC SSL Certificates page, click Restore Default Certificate.
- To confirm, click Yes.
NOTE: While the certificate is being restored, the OMIMSSC appliance may be unresponsive for a few minutes, and the services restart. After the task completes, clear the browser cache, close the existing browser sessions of OMIMSSC Admin Portal and Dell EMC OpenManage Integration Dashboard on the SCOM console. Log in again to the OMIMSSC Admin Portal.
|