Based on this article
The DCO SSL certificate needs to be an Apache 2.x/PEM format certificate consisting of two files (*.key, *.crt).
But the customer needs to extract a CSR to create a certificate for the DCO like we did in DCE,
Is this applicable in DCO or it should be Apache 2.x/PEM format certificate consisting of two files (*.key, *.crt) ?
And if this is applicable, how to extract this CSR from DCO? And how to upload the certificate without (*.key) file?
I attached a pdf you can use as a reference to create a CSR from a DCO or ITA server (should work on either).
To generate an SSL link, a web server requires an SSL certificate. SSL certificates are issued by internal or trusted third-party certifying authorities. Browsers and Curl (60) SSL Certificate Problem: Unable to get local issuer certificate. Note: This is a system configuration problem, and not specific to either cURL or Bolt.
Are you making a comment or asking a question as a follow-up to this post?
You are correct in regards to signed SSL certificates. They need to come from a trusted authority, usually a third party.
But the procedure attached to the below post or this help center page https://helpcenter.ecostruxureit.com/hc/en-us/articles/360016589697-How-to-manually-create-a-CSR-cer... should allow the user to fetch the current SSL key for their DCO/ITA server and create a certificate signing request.
When the CSR is signed either internally or by a trusted authority, then that signed certificate along with the original key created in the procedure should allow you to apply a signed certificate to your DCO/ITA server.
Discuss challenges in energy and automation with 30,000+ experts and peers.
Find answers in 10,000+ support articles to help solve your product and business challenges.
Find peer based solutions to your questions. Provide answers for fellow community members!