cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to Generate CSR in Dynatrace Managed server for SSL certificate request

pshinde
Inactive

Hi Team , We would like to use internal ssl certificate instead of ssl certificate provided by dynatrace . Can you please share details steps on How to generate CSR from Managed Cluster Server . Do we need to generate 3 CSR if it is 3 Node cluster

8 REPLIES 8

Babar_Qayyum
DynaMight Leader
DynaMight Leader

Hello Prashant,

Use the OpenSSL toolkit to generate CSR and provide it to the CA you have selected in order to request a valid certificate.

Have a look for the similar post.

https://answers.dynatrace.com/spaces/482/dynatrace...

Regards,

Babar

Hi Babar thanks for your reply. I did saw the URL shared by you but it did not highlighted process to generate CSR. it does show how to import the certificate

Hello Prashant,

I mentioned to use the OpenSSL toolkit to generate the CSR in my first answer.

Regards,

Babar

pshinde
Inactive

Thanks what about keytool which is available in Linux

That can work as well, here's a page I usually use as reference for keytool commands: https://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html

pshinde
Inactive

Hi James Do we need to use specific alias name & trust store /Keystore password while generating this request .Or it can be anything ?

I'm not an expert in this area so my answer wouldn't be authoritative but in my experience it doesn't really matter so long as you know what they are. I think the keystore name is generally based off of the host name.

Hello @Prashant S.

As per my understanding you will have to create a customized keystore.jks which contains a new private key accompanied by the certificate chain (with alias dtserver) and has it's password defined.

Below link is for the AppMon but it should be apply on the Dynatrace.

https://www.dynatrace.com/support/doc/appmon/installation/set-up-communication-connections/certificate-management/advanced-features-certificates-private-keys-and-keystore/

Regards,

Babar