topic Re: installing letsencrypt certificate in ocum in Active IQ and AutoSupport Discussions

installing letsencrypt certificate in ocum

grocanar — Wed, 04 Jun 2025 09:53:03 GMT

I m trying to install a letsencrypt certificate in my ocum server but i got the follwing messages

Failed to install certificate: A valid full certificate chain from the host certificate to the Certificate Authority's certificate must be provided.

I have carefully followed the instruction from here

https://docs.netapp.com/us-en/active-iq-unified-manager/config/concept_install_https_certificate_generated_using_external_tools.html

my fqdn is ocum.admin.ibfj-evry.fr

the fullchain output file give me

openssl crl2pkcs7 -nocrl -certfile fullchain.pem | openssl pkcs7 -print_certs -noout
subject=/CN=ocum.admin.ibfj-evry.fr
issuer=/C=US/O=Let's Encrypt/CN=R3

subject=/C=US/O=Let's Encrypt/CN=R3
issuer=/C=US/O=Internet Security Research Group/CN=ISRG Root X1

subject=/C=US/O=Internet Security Research Group/CN=ISRG Root X1
issuer=/O=Digital Signature Trust Co./CN=DST Root CA X3

then i have a valid full certificate chain from the host certificate to the Certificate Authority's certificate

i have prepend the private key file.

but i got no luck

how can i debug this problem.?

Re: installing letsencrypt certificate in ocum

vedantsethia — Tue, 07 Feb 2023 08:12:12 GMT

Hi Eric,

I am not a OCUM guy. But from the error message, it looks like the server does not trust the cert authority.
I found this document which might help you: https://kb.netapp.com/Advice_and_Troubleshooting/Data_Infrastructure_Management/Active_IQ_Unified_Manager/How_to_generate_and_convert_a_signed_certificate_for_Active_IQ_Unified_Manager

Thanks

Vedant

Re: installing letsencrypt certificate in ocum

grocanar — Wed, 08 Mar 2023 14:39:36 GMT

I can't use this link as the key and the cert are generated externally.
in the link onegenerate a csr to be sign which is impossible qith letsencrypt
i follow the instructions in the link i give but with no luck