How to Generate CSR in Dynatrace Managed server for SSL certificate request

[pshinde]

Hi Team , We would like to use internal ssl certificate instead of ssl certificate provided by dynatrace . Can you please share details steps on How to generate CSR from Managed Cluster Server . Do we need to generate 3 CSR if it is 3 Node cluster

[Babar_Qayyum · Accepted solution]

Hello Prashant,

Use the OpenSSL toolkit to generate CSR and provide it to the CA you have selected in order to request a valid certificate.

Have a look for the similar post.

https://answers.dynatrace.com/spaces/482/dynatrace...

Regards,

Babar

[pshinde]

Hi Babar thanks for your reply. I did saw the URL shared by you but it did not highlighted process to generate CSR. it does show how to import the certificate

[Babar_Qayyum]

Hello Prashant,

I mentioned to use the OpenSSL toolkit to generate the CSR in my first answer.

Regards,

Babar

[pshinde]

Thanks what about keytool which is available in Linux

[JamesKitson]

That can work as well, here's a page I usually use as reference for keytool commands: https://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html

[pshinde]

Hi James Do we need to use specific alias name & trust store /Keystore password while generating this request .Or it can be anything ?

[JamesKitson]

I'm not an expert in this area so my answer wouldn't be authoritative but in my experience it doesn't really matter so long as you know what they are. I think the keystore name is generally based off of the host name.

[Babar_Qayyum]

Hello @Prashant S.

As per my understanding you will have to create a customized keystore.jks which contains a new private key accompanied by the certificate chain (with alias dtserver) and has it's password defined.

Below link is for the AppMon but it should be apply on the Dynatrace.

https://www.dynatrace.com/support/doc/appmon/installation/set-up-communication-connections/certificate-management/advanced-features-certificates-private-keys-and-keystore/

Regards,

Babar