Renewing the Cloud Manager certificate

You must renew the Cloud Manager certificate before it expires; otherwise, Cloud Manager cannot sign client certificates for ONTAP Cloud systems.

About this task

If you renew the Cloud Manager intermediate CA certificate, Cloud Manager uses the renewed certificate to generate client certificates for new ONTAP Cloud systems. You can renew client certificates for existing ONTAP Cloud systems from the working environment.


  1. In the upper-right corner of the Cloud Manager console, click the task drop-down list, and then click Encryption Setup.
  2. In the Intermediate CA tab, click Renew Intermediate CA.
  3. Click Generate CSR.
  4. Use the CSR to submit a certificate request to a CA.
    The intermediate CA certificate must use the Privacy Enhanced Mail (PEM) Base-64 encoded X. 509 format.
  5. Copy the contents of the signed certificate and paste it in the Cloud Manager certificate field.
  6. Click Install Cloud Manager Certificate.