topic Automate ACTIVE IQ SSL certificate in Active IQ Unified Manager Discussions

Automate ACTIVE IQ SSL certificate

Victornetapp — Thu, 02 Nov 2023 10:42:28 GMT

Hello ,

I have been searching for weeks for a way to automate the renew of ssl certificate of ACTIVE IQ . the only promising thing that found is the shell script : /opt/netapp/essentials/bin/cert.sh . the problem is that i don't know how to use it . I don't prefer to use external tools like openssl i just want to automate the known way of doing it : regenerate the HTTPS certificate download the csr , sign the csr and finally import the certificate .

IS THERE ANYONE WHO KNOW HOW TO DO IT ???

Thanks in advance

Re: Automate ACTIVE IQ SSL certificate

Haseeb — Thu, 21 Dec 2023 16:06:58 GMT

Hello,
Are you planning to signs the certificate externally or does it suffice if the is self signed?

Re: Automate ACTIVE IQ SSL certificate

Victornetapp — Fri, 22 Dec 2023 12:52:30 GMT

Hello,
It is an externally signed certificate not self-signed

Best regards

Re: Automate ACTIVE IQ SSL certificate

Haseeb — Mon, 25 Dec 2023 17:36:58 GMT

I don't think there is a script available that generates a CSR, the cert.sh script can be used to import a certificate.
AIQUM is not really set up to allow automating this task.
What you can try though is have a look at the HTTP Requests that are sent when clicking on the CSR and "install Certificate" buttons on AIQUM UI. There should be two requests to a management API endpoint that should yield the CSR and allow uploading a certificate.