Active IQ Unified Manager Discussions

Generating a CSR in OCUM without ip addresses

IVENTSTORAGE
2,693 Views

We want to use our own certificates in OCUM (7.3), we can generate a CSR without problems. But our CA will only accept a CSR without ip addresses in it (security policy). When we regenerate a http certificate we tried to change the Alternative Names option and remove the ip adresses. But after regenerating the ip addresses still apear.

 

OCUM is installed on a Windows 2012 R2 Server

 

Is there any way to generate a CSR with only the DNS name(s) in OCUM?

2 REPLIES 2

MikeF1
2,654 Views

I ran into this issue as well, and submited a FPVR for this functionality.  I'm told the fix is in OCUM 9.4 RC1 but I have not had a chance to confirm. 

IVENTSTORAGE
2,601 Views

I installed OCUM 9.4 RC1 in our test environment and I can now confirm that it is fixed in that version!

There is now an extra option in Regenerate Certificate:  "Exclude local identifying information (e.g. localhost)"

Public