To generate a web server certificate, use the vManage Administration ► Settings screen.
To establish a secure connection between your web browser and the vManage server using authentication certificates, you must generate a CSR to create a certificate, have it signed by a root CA, and then install it. To do so:
- Click the CSR button to the right of the Web Server Certificate bar.
- In the Common Name field, enter the domain name or IP address of the vManage server. For example, the fully-qualified domain name of vManage could be vmanage.org.local.
- In the Organizational Unit field, enter the unit name within your organization, for example, Network Engineering.
- In the Organization field, enter the exact name of your organization as specified by your root CA, for example, Viptela Inc.
- In the City field, enter the name of the city where your organization is located, for example, San Jose.
- In the State field, enter the state in which your city is located, for example, California.
- In the 2-Letter Country Code field, enter the two-letter code for the country in which your state is located. For example, the two-letter country code for the United States of America is US.
- From the Validity drop-down, select the validity period for the certificate.
- Click Generate to generate the CSR.
- Send the CSR to Symantec or a root CA for signing.
- When you receive the signed certificate, click the Certificate button to the right of the Web Server Certificate bar to install the new certificate. The View box displays the current certificate on the vManage server.
- Copy and paste the new certificate in the box. Or click the Import button, click Select a File to download the new certificate file, and click Import.
- Once the certificate is installed, reboot the vManage server.
Below is an example of a certificate generated with the above configuration. Note that the certificate is truncated in this example.
View Web Server Certificate Expiration Date
When you establish a secure connection between your web browser and the vManage server using authentication certificates, you configure the time period for which the certification is valid (in Step 8 in the previous section). At the end of this time period, the certificate expires. The Web Server Certificate bar shows the expiration date and time.
Starting 60 days before the certificate expires, the vManage Dashboard displays a notification indicating that the certificate is about to expire. This notification is then redisplayed 30, 15, and 7 days before the expiration date, and then daily.
Introduced in vManage NMS in Release 15.2.