Generating a Certificate Signing Request on UCS C220 M3 running CIMC 1.5(4e)

[James Hawkins]

Hi,

I have a couple of UCS C220 M3 servers and want to install certificates on them.

The certificate authority will not issue certs with a modulus of 1024 which seems to be the default created when generating a Certificate Signing Request using the GUI. The GUI does not allow me to set the modulus to a higher value.

I have poked around in the CLI but there does not seem to be an option to do it there.

The CLI guide says there should be a "scope security" cli command that would allow me to do this but it is not present on my C series server so I am guessing it might only be available on B series servers?

Does anyone know if it is possible to change the modulus from 1024 when generating CSR's on this model of server?

Thanks

[Reuben Farrelly · Accepted solution]

See this thread for more information - this has come up recently:

https://supportforums.cisco.com/discussion/11664446/importing-cimc-ssl-server-certificate-using-internal-ca