A certificate signing request (CSR) is used to obtain a signed certificate for the server. After the request is created, the certificate signing request must be submitted to a CA to be signed. After the request is signed, the resulting signed certificate can be installed.
For Viewpoint 16.20.00.03 and later, a self-signed certificate is visible after you click HTTPs Config.
- From the Setup list, select HTTPS Config.
- Under Certificate Signing Request, do the following under Step 1:
- Select Create File.
- Enter the following information:
Field Description Common Name Domain name Subject Alternative Name [Optional] IP address or DNS name. Select to see the required format. Organizational Unit Business unit Organization Company name City or Locality City or locality of the organization State or Province State or province of the organization Country Country code where the organization is located Email [Optional] Email address of the requester - Click Create.
- If a certificate was previously installed, select Replace.
A csr file is created and the file name appears as a link under Step 2. - Under Step 2, do one of the following:
Option Description Copy - Select the link.
- View the contents of the CSR in the box or copy it to the Clipboard for further use.
- Select Close.
View CSR contents before downloading - Select the link.
- Select Download.
The file is saved to your download area or to a location that you specify, depending on the browser settings.
Download without viewing CSR contents - Select .
The file is saved to your browser's download area.
- Outside of Teradata Viewpoint, do the following:
- Send the CSR to a CA for signing.
- After the request is signed by the CA, get the certificate bundle to your local system and extract its contents, namely ServerCertificate.crt, Intermediate.crt and Root.crt.
- Generate a PKCS#7 formatted file through the command “openssl crl2pkcs7 -nocrl -certfile /tmp/ServerCertificate.crt -certfile /tmp/Intermediate.crt -certfile /tmp/Root.crt -out /tmp/final.p7b” using ServerCertificate.crt, Intermediate.crt and Root.crt obtained from the CA
- Under Step 3, do the following:
- Select Install.
- In the Certificate box, select Choose File and browse to the saved final.p7b file obtained from step 4.c
- Select Install.
The name of the new certificate appears in the Certificate box.
HTTPS connections immediately start using the new certificate and no restart of the Viewpoint server is required.