This section explains the procedure for creating the certificates that are used during HTTPS communication performed by Resource Orchestrator.
Procedure
Execute the following commands to back up the existing certificates.
> cd C:\Program Files (x86)\Resource Orchestrator\SVROR\Manager\sys\apache\conf <RETURN> >..\..\..\bin\rcxadm mgrctl stop <RETURN> > copy ssl.crt\server.crt ssl.crt\server.crt.org <RETURN> > copy ssl.key\server.key ssl.key\server.key.org <RETURN>
Execute the following command to create the new certificates.
>..\bin\openssl.exe req -new -x509 -nodes -sha256 -newkey rsa:2048 -out ssl.crt\server.crt -keyout ssl.key\server.key -days 5479 -config openssl.cnf <RETURN>Press the [Enter] key when prompted to do so.
Example
>cd "C:\Fujitsu\ROR\SVROR\Manager\sys\apache\conf" <RETURN> >..\..\..\bin\rcxadm mgrctl stop <RETURN> >copy ssl.crt\server.crt ssl.crt\server.crt.org <RETURN> >copy ssl.key\server.key ssl.key\server.key.org <RETURN> >..\bin\openssl.exe req -new -x509 -nodes -sha256 -newkey rsa:2048 -out ssl.crt\server.crt -keyout ssl.key\server.key -days 5479 -config openssl.cnf <RETURN> Loading 'screen' into random state - done Generating a 2048 bit RSA private key .................++++++ ................................++++++ writing new private key to 'ssl.key\server.key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) []: <RETURN> State or Province Name (full name) []: <RETURN> Locality Name (eg, city) []: <RETURN> Organization Name (eg, company) []: <RETURN> Organizational Unit Name (eg, section) []: <RETURN> Common Name (eg, YOUR name) [localhost]: IP_address or Host_name (*) <RETURN> Email Address []: <RETURN> >..\..\..\bin\rcxadm mgrctl start <RETURN>
* Note: Enter the IP address or host name (FQDN) to be entered in the Web browser.