Failed to store the certificates

[catherina]

Hi!

I am creating new certificates for my vservers. The first ones went ok, but now I get the error message "Failed to store the certificates". Anyone know why?

I have cdot 9.0. 

Command:

nrk-cl1::*> security certificate create -vserver nrk-cl1-01 -common-name nrk-cl1-01.cert -type server -size 2048 -country US -state "" -locality "" -organization "" -unit "" -email-addr "[email protected]" -expire-days 3650 -hash-function SHA256

Error: command failed: Failed to store the certificates.

I have also tried common name without .cert.

Or is cluster certificate enough? If so, why are there certificates for every vserver?

[Sahana · Accepted solution]

Hi,

 If your system has a node-based certificate, you do not have to renew it
 because all SSL connections in the cluster are now using the cluster-based
 certificate for authentication.

It may be due to the bug http://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=918794

Also refer KB https://kb.netapp.com/support/s/article/failed-to-create-ssl-certificate-for-node-vserver-on-clustered-data-ontap-8-3-with-error-failed-to-store-the-c...

[catherina]

Ty Sahana!

Unfortanly I can't access the KB since i'm a end user.

[Sahana]

The KB is customer viewable. Please create a netapp login and request access.

The cluster certificate is sufficient. Error can be ignored.