CSA MC 6 - How can I create an SSL Certificate that points to a name other than the hostname?

Unanswered Question
Sep 9th, 2010

I have just installed CSA MC 6.0.2.  My company has a bunch of customer's that are on different domains.  We are all linked through VPN tunnels and would like to have all the agents point to a specific URL for updates rather than the hostname of the machine.

FQDN:                    testserver.abc123.internal

URL:                       thisserver.abc123.com

We already have everything setup so that the clients can reach thisserver.abc123.com but I need to create a certificate with this name without changing the server's hostname.  We also don't wnat update their host files.  Any ideas?

If anyone could help I would greatly appreciate it as we're looking to start upgrading the agents on all servers ASAP.

Thank you,


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Scott Fringer Wed, 09/15/2010 - 04:45


  Unfortunately there is no supported method to generate a different SSL certificate for the MC.  The one option is to change the MC's hostname (and update the certificats/database and existing agent systems), but you indicated you do not want to perform that action.


tsteger1 Fri, 09/17/2010 - 11:50

What about putting the CSAMC in your DMZ and allowing those ports through your firewall?

The nice thing is it allows hosts to communicate with the MC no matter where they are.

You'd have to open up 80 to the MC for software updates but we haven't had any problems in 6 years with that setup.



This Discussion