Wired Intelligent Edge

 View Only
last person joined: yesterday 

Bring performance and reliability to your network with the HPE Aruba Networking Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of your switching devices, and find ways to improve security across your network to bring together a mobile-first solution
Expand all | Collapse all

Creating CA Root Signed Certificates

This thread has been viewed 19 times
  • 1.  Creating CA Root Signed Certificates

    Posted Feb 28, 2024 09:43 PM


    Switch model: HP 2530 (J9774A) 8 port (but we've also got a single Aruba 6000 12 port that I need to do this on)
    Firmware: YA.16.11.0016 or YA.16.11.0013

    I've been trying to create signed certs for our switches with our AD CA Root as the Trusted Authority.

    It seems such a simple process on the face of it.

    I add in the CA root as a Trusted Anchor, which then enables the 'Create CSR' link:

    I use the Create CSR link to, um, create the CSR, then I copy the CSR to a text file then use that on one of my Windows AD CA servers to create the signed certificate.

    I then paste that in to the field on the Switch's web console. All seems fine.

    Until I try to use https on the switch, at which point I get a warning.

    According to the error, the browser is demanding that the certificate includes a Subject Alternative Name (SAN), which seems like a very sensible minimum standard, to be fair.

    And believe me I'd actually very happily include at least two SANs (the FQDN and the IP address) if only the switch's web console presented me with the opportunity!

    I could be wrong, but I don't think even the CLI (which I've not got the hang of when it comes to the crypto command) offers the option to include SANs in the CSR.

    Am I missing something?

    Thanks in advance.

    An IT Infrastructure bloke
    Somewhere in London (UK)

  • 2.  RE: Creating CA Root Signed Certificates

    Posted Feb 29, 2024 09:19 AM

    You need to transform the request to add the SAN information.

    See my post:


  • 3.  RE: Creating CA Root Signed Certificates

    Posted Mar 11, 2024 05:01 AM

    Thank you for this.

    Got an error though (just once I'd like something I try to do in IT to, you know, just work first time! 😆)