Open Documentation Menu

Create SSL-certificates with OpenSSL create

d.ecs storage manager allows you to encrypt the web-interface and the API via SSL.

This requires a valid SSL certificate. To create such a certificate, the sub-directory SSLCertificate in the installation-directory of d.ecs storage manager contains two batch files using OpenSSL to create such a certificate. To do so, follow the steps below:

  • Start the file create_key.bat to create an SSL-certificate (the files server.crt and server.key are created). This certificate is already sufficient to enable an SSL encryption in d.ecs storage manager. Since the certificate, however, is not validated and marked as “trusted” by an official verification authority , Internet browsers may display respective warning messages.

  • To have the certificate validated and signed by an official verification authority, start the file create_csr.bat and thus create the files required for this (request.csr). The official verification authority requires these files to create an officially signed certificate.

Warning

Consider the following when choosing the host name: The SSL certificate is only created for one specific host name (in this case this must be the host name of the machine on which the d.ecs storage manager is running). If the host name changes, the SSL certificate must be recreated and signed by the verification authority accordingly.

Please understand that this manual does not further explain SSL certificates and OpenSSL. For additional information refer to http://www.openssl.org.