Install storage array external key management certificate

11/01/2024 Contributors

The download storageArray keyManagementCertificate command installs the external key management certificates on the storage array.

Supported Arrays

This command applies to an individual E4000, E2800, E5700, EF600 or EF300 storage array. It does not operate on E2700 or E5600 storage arrays.

Roles

To execute this command on an E4000, E2800, E5700, EF600, or EF300 storage array, you must have the Security Admin role.

Context

This command applies only to external key management.

Syntax

download storageArray keyManagementClientCertificate certificateType=(client|server) file="filename" [privateKeyFile = "keyFileName"]

Parameters

Parameter Description

Parameter	Description
`certificateType`	Allows you to specify the certificate file type. Valid choices are `client` or `server`.
`file`	Allows you to specify the client signed certificate or server root/intermediate CA certificate. The file must be in PEM/DER format.
`privateKeyFile`	Allows you to download a private key alongside a signed certificate. The `privateKeyFile` parameter must be used with `certificateType=client` value.

certificateType

Allows you to specify the certificate file type. Valid choices are client or server.

file

Allows you to specify the client signed certificate or server root/intermediate CA certificate. The file must be in PEM/DER format.

privateKeyFile

Allows you to download a private key alongside a signed certificate. The privateKeyFile parameter must be used with certificateType=client value.

Examples

SMcli -n Array1 -c "download storageArray keyManagementClientCertificate certificateType=client
   file="C:\serverSignedKeyMgmtClientCert.cer";"


SMcli completed successfully.

Minimum firmware level

8.40