topic Re: How to Generate CSR in Dynatrace Managed server for SSL certificate request in Dynatrace Managed Q&A

How to Generate CSR in Dynatrace Managed server for SSL certificate request

pshinde — Tue, 03 Dec 2024 10:13:02 GMT

Hi Team , We would like to use internal ssl certificate instead of ssl certificate provided by dynatrace . Can you please share details steps on How to generate CSR from Managed Cluster Server . Do we need to generate 3 CSR if it is 3 Node cluster

Re: How to Generate CSR in Dynatrace Managed server for SSL certificate request

Babar_Qayyum — Wed, 12 Mar 2025 10:20:37 GMT

Hello Prashant,

Use the OpenSSL toolkit to generate CSR and provide it to the CA you have selected in order to request a valid certificate.

Regards,

Babar

Re: How to Generate CSR in Dynatrace Managed server for SSL certificate request

pshinde — Wed, 18 Apr 2018 11:30:55 GMT

Hi Babar thanks for your reply. I did saw the URL shared by you but it did not highlighted process to generate CSR. it does show how to import the certificate

Re: How to Generate CSR in Dynatrace Managed server for SSL certificate request

Babar_Qayyum — Wed, 18 Apr 2018 12:22:27 GMT

Hello Prashant,

I mentioned to use the OpenSSL toolkit to generate the CSR in my first answer.

Regards,

Babar

Re: How to Generate CSR in Dynatrace Managed server for SSL certificate request

pshinde — Wed, 18 Apr 2018 12:24:50 GMT

Thanks what about keytool which is available in Linux

Re: How to Generate CSR in Dynatrace Managed server for SSL certificate request

JamesKitson — Wed, 18 Apr 2018 12:51:50 GMT

That can work as well, here's a page I usually use as reference for keytool commands: https://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html

Re: How to Generate CSR in Dynatrace Managed server for SSL certificate request

pshinde — Wed, 18 Apr 2018 12:59:58 GMT

Hi James Do we need to use specific alias name & trust store /Keystore password while generating this request .Or it can be anything ?

Re: How to Generate CSR in Dynatrace Managed server for SSL certificate request

JamesKitson — Wed, 18 Apr 2018 19:11:14 GMT

I'm not an expert in this area so my answer wouldn't be authoritative but in my experience it doesn't really matter so long as you know what they are. I think the keystore name is generally based off of the host name.

Re: How to Generate CSR in Dynatrace Managed server for SSL certificate request

Babar_Qayyum — Thu, 19 Apr 2018 06:21:32 GMT

Hello @Prashant S.

As per my understanding you will have to create a customized keystore.jks which contains a new private key accompanied by the certificate chain (with alias dtserver) and has it's password defined.

Below link is for the AppMon but it should be apply on the Dynatrace.

https://www.dynatrace.com/support/doc/appmon/installation/set-up-communication-connections/certificate-management/advanced-features-certificates-private-keys-and-keystore/

Regards,

Babar