Installing a certificate on CMX Using Built-in OpenSSL
This video tutorial by Karima demonstrates the process of installing and signing a certificate on Cisco CMX using OpenSSL, addressing common issues related to the SAN field in certificates when provisioning CMX in Cisco DNA Center.
MAIN POINTS FROM TRANSCRIPT
- Users must manually install a certificate with the SAN field by creating or configuring a file.
- The video guides users without a CA on how to sign certificates using OpenSSL.
- Instructions include generating a CSR, private key, and self-signed certificate valid for 365 days.
- After installation, verify the CMX service status to ensure no SAN field errors remain.
TAKEAWAYS
- Ensure the 'rout' is enabled and navigate to the CMX admin directory for configuration.
- Create an OpenSSL configuration file with updated key usage details and IP addresses.
- Generate a CA private key and self-signed certificate using OpenSSL commands.
- Verify and install the new CA and device certificates, then check CMX service status.