Managing a Certificate

Prerequisites

You have obtained the certificate file and certificate information.

The obtaining methods include:

• CLI

1. Run the following command on the Windows 10 or Linux host:

   echo -n | openssl s_client -connect IP:PORT 2>&1 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > yourcert.pem

   For example, run the following command to generate a Huawei email server certificate:

   echo -n | openssl s_client -starttls smtp -connect smtp.huawei.com:587 2>&1| sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > smtp.pem

   Or

   echo -n | openssl s_client -connect popscn06.huawei.com:995 2>&1| sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > pop.pem

   

   Certificate files in other formats (such as .jks, .cer, and .crt) can be converted.

• Browser

1. Enter the address in the browser address bar, click View site information in front of the address to obtain the certificate file.

   The following takes obtaining the Huawei email server certificate as an example:

   1. Open a browser, enter https://dggpro-b.paas.huawei.com/cloudauth/?redirect=https%3A%2F%2Fcn02%2Eemail%2Ehuawei%2Ecom%3A%2Fowa in the address box, and log in to the mailbox using a domain account.
   2. After login, click View site information in front of the address, and then click Certificate (Valid).

      

   3. Click the Certification Path tab, select the root certificate, and click View Certificate.

      All branch sites of a website can use the root certificate in the certificate chain for authentication. Therefore, the root certificate is recommended to reduce the certificate maintenance workload.

   4. In the dialog box that is displayed, click the Details tab, click Copy to File, and click Next. (You can also click the Certificate Path tab to export the root certificate or level-2 certificate. The export method is similar.)

      

   5. Select a certificate format and click Next.

      

   6. Enter the name of the certificate file to be exported and click Next.

      

   7. Click Finish to generate a certificate file. The file name is the complete path of the certificate file.

      

Procedure

1. Sign in to AICC as a tenant administrator and choose Configuration Center > System Management > Certificate.
2. Click New.

   For details about the parameters, see "Tenant Self-Operations > Managing a Certificate" in AICC Feature Description.

   

3. Click Complete. The certificate is uploaded successfully and takes effect 10 minutes later.

Follow-up Procedure

After the certificate is uploaded, click Edit in the Operation column to update it.