Custom SNMP extension creation

[msp]

Hello 

I have 2 different questions in the process of custom SNMP extension creation

Q1. As per the link https://www.dynatrace.com/support/help/extend-dynatrace/extensions20/snmp-extensions

In the DT-CLI step 2 - Generate certificates

https://www.dynatrace.com/support/help/extend-dynatrace/extensions20/sign-extension#sign-and-build-y...

Is it possible that we can sign multiple extension with one root CA ?

Or do we have to keep generating different CA files every time to complete the signing of the extension ?

Q2. In the open SSL method -In the active gate to upload the root certificate to verify the authenticity of the extension.

https://www.dynatrace.com/support/help/extend-dynatrace/extensions20/sign-extension#sign-and-build-y...

Can any one say while creating  remote extension should we replace the CA.pem file in the directory everytime a new extension is created  ?

• Windows:
  %PROGRAMDATA%\dynatrace\remotepluginmodule\agent\conf\certificates

Or should we keep adding the new CA files with the (File name changed like ca1.pem,ca2.pem etc?)

Some help would be great.

[AntonioSousa]

Couple questions, couple answers 😀

• Is it possible that we can sign multiple extension with one root CA ?
  Yes, I have several. No need to keep generating different CA files, but please generate and use them wisely.
• Can any one say while creating remote extension should we replace the CA.pem file in the directory everytime a new extension is created ?
  Since it's only one CA, you can of course reuse the CA certificate.