Managing Certificates

Import Trusted Certificates

You can import certificates of servers that Cyfuture Cloud Console communicates with, such as VMWare vCenter Server, Networking Manager, and so on.

When using Cyfuture Cloud Console in FIPS mode, you must use FIPS-compatible private keys. You can use pyOpenSSL to generate private keys in FIPS-compatible PKCS#8 format. If you generate PKCS#8 private keys by using OpenSSL, the private keys are not FIPS-compatible. For more information about FIPS mode, see Enable FIPS Mode on the Cells in the Server Group or Enable or Disable FIPS Mode on the Cyfuture Cloud Console Appliance.

Prerequisites

Verify that you are logged in as a system administrator or organization administrator.

Procedure

1. From the top navigation bar, select Administration.

2. In the left panel, under Certificate Management, select Trusted Certificates and click Import.

3. Upload a PEM file containing the certificates that you want to import and click Import.

4. (Optional) Edit the certificate name.

5. Click Import.

What to do next

• Download a certificate.
• Edit a certificate name.
• Delete a certificate.
• Copy the PEM data to the clipboard.

Import Certificates to the Certificates Library

In the Cyfuture Cloud Console certificates library, you can import certificates used when creating entities that you must secure, such as servers, edge gateways, and so on.

The certificate library contains information about single certificates, certificate chains, private keys, certificate expiration dates, the entities that the certificates secure, and so on.

When using Cyfuture Cloud Console in FIPS mode, you must use FIPS-compatible self-signed certificates and private keys. You can generate self-signed unencrypted certificates and private keys by using pyOpenSSL. If you generate self-signed certificates and private keys by using OpenSSL, the certificates and private keys are not FIPS-compatible. For more information about FIPS mode, see Enable FIPS Mode on the Cells in the Server Group or Enable or Disable FIPS Mode on the Cyfuture Cloud Console Appliance.

Prerequisites

Verify that you are logged in as a system administrator or organization administrator.

Procedure

1. From the top navigation bar, select Administration.

2. In the left panel, under Certificate Management, select Certificates Library and click Import.

3. Enter a name, and optionally, a description for this certificate in the certificate library and click Next.

4. Upload a PEM file containing the certificate chain that you want to import and click Next.

5. (Optional) Upload a private key file.

Your private key file might not be protected with a passphrase.

   6. Click Import.

Results

The imported certificate appears in the list of available certificates during the creation of entities that you must secure.

What to do next

Download a certificate.

Edit the name and description of a certificate.

Delete a certificate. You can delete only certificates that do not secure any entities.

Copy the certificate PEM data to the clipboard.