Installing a signed certificate onto a storage system

You also need to install a signed certificate in a storage system if you are going to use the certificate authentication method for the IPsec protocol.

Before You Begin

If the certificate was signed by a Windows 2000 certificate authority, complete steps 1-8 of the "Installing a certificate signed by a Windows 2000 certificate authority onto a Windows client" procedure to install the certificate on a Windows client and export the certificate, including its private key, into a file.

Steps

Copy the signed certificate onto the root volume of the storage system.
For example, mount the storage system's root volume on an NFS client, such as your administration console, and then copy the file containing the signed certificate onto the storage system's root volume.
If the signed certificate is in the Windows PKSC12 (*.pfx) format, convert it to the X.509 (*.pem) format.
For example, use the openssl utility. For more information, search the Internet for "openssl."
Install the signed certificate. At your storage system command line, enter the following command: keymgr install cert signed_certificate_file_name
Here, signed_certificate_file_name is the full path to the file containing the signed certificate.