Generate Key Management Certificate Signing Request (CSR)

The save storageArray keyManagementClientCSR command requests a generated CSR for the storage array that you can save to a file.

Supported Arrays

This command applies to an individual E2800, E5700, EF600 or EF300 storage array. It does not operate on E2700 or E5600 storage arrays.

Roles

To execute this command on an E2800, E5700, EF600, or EF300 storage array, you must have the Security Admin role.

Context

Note: This command applies only to external key management.

Syntax

save storageArray keyManagementClientCSR commonName="common_name"
organization="organization"
locality="locality"
country="country" 
file="file"
[organizationalUnit="organizational_unit"]
[stateProvince="state_province"]

Parameters

Parameter Description
commonName The value entered for this parameter must match one of the user names defined on the KMIP server.
organization Allows you to specify the organization’s full legal name that the storage array belongs to. Do not abbreviate it and include any suffixes such as Inc, Corp, or LLC.
locality Allows you to specify the city or locality where the storage array is located,
country Allows you to specify your country's two-digit ISO (International Organization for Standardization) 3166-1 alpha-2 code, such as US.
file Allows you to specify the file and file location where you will save the controller’s signed certificate file.
organizationalUnit Allows you to specify the organization’s division that handles the certificate.
stateProvince Allows you to specify the state or region where the storage array is located. This should not be abbreviated.

Example

SMcli -n Array1 -c "save storageArray keyManagementClientCSR commonName="192.0.2.1 "
organization="Widgets Are Us, Inc."
locality="sedgwick"
country="US"
file="latestCertificate"
organizationalUnit="Products Unit"
stateProvince="Kansas";"

SMcli completed successfully.

Minimum firmware level

8.40