Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Server Certificates -

Can someone explain the process for creating/uploading SSL server certificates to a CiscoWorks server?

  • Network Management
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Server Certificates -

Self-signed are the cheap ones (i.e. free). You'd know if you were using CA-signed as you would have to have sent a sign request file off to a CA like Verisign (and they would have charged you for the result). For LMS 2.2, the documentation for self-signed certs can be found at:

http://server-url/help/security/sec_self_signed_cert.htm

5 REPLIES
Cisco Employee

Re: Server Certificates -

Which type of certificates? CiscoWorks supports both self-signed and CA signed. You should also mention your version of CiscoWorks as the procedure differs between versions. General help for creating self-signed certificates is available in the context-sensitive online help. For example, for LMS 2.5, this can be found at:

http://server-url/help/cmf/sysadmin_self_sign_cert.html

New Member

Re: Server Certificates -

RME 3.5 -

I think these are self-signed but 'am not sure....

I will take a look at the context sensitive help tomorrow.

Cisco Employee

Re: Server Certificates -

Self-signed are the cheap ones (i.e. free). You'd know if you were using CA-signed as you would have to have sent a sign request file off to a CA like Verisign (and they would have charged you for the result). For LMS 2.2, the documentation for self-signed certs can be found at:

http://server-url/help/security/sec_self_signed_cert.htm

New Member

Re: Server Certificates -

I had 2 problems.

The 1st which came up showing invalid hostname was easy to fix. I had the URL as https://:1742. I simply needed to change the URL to https://:1742.

The 2nd message was for an expired server certificate. These files reside in /opt/CSCOpx/objects/web/conf/server.*

*Disable SSL under Server Configuration> Admin> Security Mgmt > Enable/Disable SSL

*dmgtd stop and start

*login to the browser using http://:1741

*Create a new certificate under Server Configuration> Admin> Security Mgmt > Create Self Siged Certificates

*Stop and start dmgtd

*Access the browser using https://:1742

New Member

Re: Server Certificates -

I left 5 out of the previous post:

1)Disable SSL under Server Configuration> Admin> Security Mgmt > Enable/Disable SSL

2)dmgtd stop and start

3)login to the browser using http://:1741

4)Create a new certificate under Server Configuration> Admin> Security Mgmt > Create Self Siged Certificates

5)Enable SSL under Server Configuration> Admin> Security Mgmt > Enable/Disable SSL

6)Stop and start dmgtd

7)Access the browser using https://:1742

148
Views
5
Helpful
5
Replies
This widget could not be displayed.