topic Re: Generating a CSR in OCUM without ip addresses in Active IQ Unified Manager Discussions

Generating a CSR in OCUM without ip addresses

IVENTSTORAGE — Wed, 04 Jun 2025 13:37:33 GMT

We want to use our own certificates in OCUM (7.3), we can generate a CSR without problems. But our CA will only accept a CSR without ip addresses in it (security policy). When we regenerate a http certificate we tried to change the Alternative Names option and remove the ip adresses. But after regenerating the ip addresses still apear.

OCUM is installed on a Windows 2012 R2 Server

Is there any way to generate a CSR with only the DNS name(s) in OCUM?

Re: Generating a CSR in OCUM without ip addresses

MikeF1 — Tue, 12 Jun 2018 17:25:49 GMT

I ran into this issue as well, and submited a FPVR for this functionality. I'm told the fix is in OCUM 9.4 RC1 but I have not had a chance to confirm.

Re: Generating a CSR in OCUM without ip addresses

IVENTSTORAGE — Wed, 13 Jun 2018 10:45:56 GMT

I installed OCUM 9.4 RC1 in our test environment and I can now confirm that it is fixed in that version!

There is now an extra option in Regenerate Certificate: "Exclude local identifying information (e.g. localhost)"