Sign In Help
Schneider Electric
HelpSign In
Schneider Electric Exchange
  • Home
  • Collaborate
  • Develop
  • Shop
Home Collaborate Develop Shop Log in or Register Help

Invite a Co-worker

Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
You have entered an invalid email address. Please re-enter the email address.
This co-worker has already been invited to the Exchange portal. Please invite another co-worker.
Please enter email address
Send Invite Cancel

Invitation Sent

Your invitation was sent.Thanks for sharing Exchange with your co-worker.
Send New Invite Close
  • Home
  • Collaborate
  • Exchange Community
  • :
  • EcoStruxure IT
  • :
  • EcoStruxure IT forum
  • :
  • SSL certifacate request from DCO and upload
Community Menu
  • Forums
    • By Topic
        • EcoStruxure IT
          • EcoStruxure IT forum
        • Industrial Automation
          • Industry Automation and Control Forum
          • Alliance System Integrators Forum
          • Machine Solutions in the Digital Transformation
          • EcoStruxure Automation Expert / IEC 61499 Forum
          • Industrial Edge Computing Forum
          • Level and Pressure Instrumentation Forum
          • Modicon User Group
          • PLC Club Indonesia
          • SEE Automation Club Forum
          • Fabrika ve Makina Otomasyonu Çözümleri
          • Форум по промышленной автоматизации СНГ
        • SCADA & Telemetry Solutions
          • Geo SCADA Expert Forum
          • SCADA and Telemetry Devices Forum
        • Power Distribution IEC
          • Power Distribution and Digital
          • Power Standards & Regulations
          • Paneelbouw & Energie Distributie
        • Power Distribution Softwares
          • EcoStruxure Power Design Forum
          • SEE Electrical Building+ Forum
          • LayoutFAST User Group Forum
        • Solutions for your Business
          • Solutions for Food & Beverage Forum
          • Solutions for Healthcare Forum
    • By Segment
        • Food & Beverage
          • Solutions for Food & Beverage Forum
        • Healthcare
          • Solutions for Healthcare Forum
      • EcoStruxure IT
        • EcoStruxure IT forum
      • Industrial Automation
        • Industry Automation and Control Forum
        • Alliance System Integrators Forum
        • Machine Solutions in the Digital Transformation
        • EcoStruxure Automation Expert / IEC 61499 Forum
        • Industrial Edge Computing Forum
        • Level and Pressure Instrumentation Forum
        • Modicon User Group
        • PLC Club Indonesia
        • SEE Automation Club Forum
        • Fabrika ve Makina Otomasyonu Çözümleri
        • Форум по промышленной автоматизации СНГ
      • SCADA & Telemetry Solutions
        • Geo SCADA Expert Forum
        • SCADA and Telemetry Devices Forum
      • Power Distribution IEC
        • Power Distribution and Digital
        • Power Standards & Regulations
        • Paneelbouw & Energie Distributie
      • Power Distribution Softwares
        • EcoStruxure Power Design Forum
        • SEE Electrical Building+ Forum
        • LayoutFAST User Group Forum
      • Solutions for your Business
        • Solutions for Food & Beverage Forum
        • Solutions for Healthcare Forum
      • Food & Beverage
        • Solutions for Food & Beverage Forum
      • Healthcare
        • Solutions for Healthcare Forum
  • Blogs
    • By Topic
        • Industrial Automation
          • Industrial Edge Computing Blog
          • Industry 4.0 Blog
          • Industrie du Futur France
        • SCADA & Telemetry Solutions
          • SCADA and Telemetry Blog
        • Power Distribution IEC
          • Power Events & Webinars
          • Power Foundations Blog
        • Power Distribution NEMA
          • NEMA Power Foundations Blog
        • Power Distribution Softwares
          • EcoStruxure Power Design Blog
          • SEE Electrical Building+ Blog
        • Solutions for your Business
          • Solutions for Food & Beverage Blog
          • Solutions for Healthcare Blog
          • Solutions for Retail Blog
        • Community experts & publishers
          • Publishers Community
    • By Segment
        • Food & Beverage
          • Solutions for Food & Beverage Blog
        • Healthcare
          • Solutions for Healthcare Blog
        • Retail
          • Solutions for Retail Blog
      • Industrial Automation
        • Industrial Edge Computing Blog
        • Industry 4.0 Blog
        • Industrie du Futur France
      • SCADA & Telemetry Solutions
        • SCADA and Telemetry Blog
      • Power Distribution IEC
        • Power Events & Webinars
        • Power Foundations Blog
      • Power Distribution NEMA
        • NEMA Power Foundations Blog
      • Power Distribution Softwares
        • EcoStruxure Power Design Blog
        • SEE Electrical Building+ Blog
      • Solutions for your Business
        • Solutions for Food & Beverage Blog
        • Solutions for Healthcare Blog
        • Solutions for Retail Blog
      • Community experts & publishers
        • Publishers Community
      • Food & Beverage
        • Solutions for Food & Beverage Blog
      • Healthcare
        • Solutions for Healthcare Blog
      • Retail
        • Solutions for Retail Blog
  • Ideas
        • Industrial Automation
          • Modicon Ideas & new features
        • SCADA & Telemetry Solutions
          • Geo SCADA Expert Ideas
          • SCADA and Telemetry Devices Ideas
  • Knowledge Center
    • Building Automation Knowledge Base
    • Industrial Automation How-to videos
    • Ask Exchange
    • Digital E-books
    • Success Stories Corner
    • Power Talks
  • Events & Webinars
  • Support
    • User Guide
    • Leaderboard
    • Releases Notes
How can we help?
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
49522members
Join Now
242868posts
Join Now

SSL certifacate request from DCO and upload

Options
  • Subscribe to RSS Feed
  • Mark Topic as New
  • Mark Topic as Read
  • Float this Topic for Current User
  • Bookmark
  • Subscribe
  • Mute
  • Printer Friendly Page
Solved Go to Solution
Back to EcoStruxure IT forum
Solved
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:49 PM
0 Likes
12
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:49 PM

SSL certifacate request from DCO and upload

This question was originally posted on DCIM Support by Boris on 2019-06-04


Hello

In continue to my post regarding to connect from DCO to Active Directory via port 636 (https://community.ecostruxureit.com/questions/143756065/dco-connect-to-active-directory-via-ssl) the answer didn’t work to me .

I have old server (version 8.0.2) where that connection via port 636 to AD is working now .

After compare the configuration I have note that certificate of the DCO WEB in old server signed  via CA of the origination  .

Unfortunately I haven’t find exactly instruction into help tech info :

https://sxwhelpcenter.ecostruxureit.com/display/public/UADCO8x/Working+with+SSL+certificates

https://sxwhelpcenter.ecostruxureit.com/display/public/UADCO8x/Changing+SSL+certificate+on+the+serve...

How I can run certificate request and after it signed upload DCO ?

Is this process will be resolve the my problem ?

(CID:144313811)

Solved! Go to Solution.

Labels
  • Data Center Operation
Share

Accepted Solutions
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:50 PM
0 Likes
3
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:50 PM

Re: SSL certifacate request from DCO and upload

This answer was originally posted on DCIM Support by Boris on 2019-07-03


Hello

The problem has been solved .

Important point the filed of the host into configuration of the Authentication Server will be same (but exactly ) such like to  certificate .

I suggest add this point to guide  

 

(CID:146278246)

See Answer In Context

Share
  • All forum topics
  • Previous Topic
  • Next Topic
12 Replies 12
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:49 PM
0 Likes
6
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:49 PM

Re: SSL certifacate request from DCO and upload

This answer was originally posted on DCIM Support by Jef Faridi on 2019-06-04


Hi Boris,

If I understand correctly, you have a DCO 8.2.7 setup integrated with AD server (as authentication server). And the integration works fine using port 389, but if you change it to port 639, then you have issue, right?

If yes, then make sure that the AD server supports encrypted communications (using port 639). 

You might also want to try in web-client, Setup (top right, wheel icon) > Certificates page, delete the certificates (including the possible expired ones) for that specific AD server in DCO, and then try to configure the integration to use port 636 and see if that helps.

By the way/just in case, if your user profile language (web-client, user profile (top right) > Language) is not English, change it to English and then retry the AD configuration editing/changes.

Additional test: if you remove the integrated AD server (from DCO), and then added, would that help?

Note: take a fresh backup before doing any major changes/tests.

 

PS: DCO is shipped with self-signed certificate, this page https://sxwhelpcenter.ecostruxureit.com/display/public/UADCO8x/Changing+SSL+certificate+on+the+serve... you are referring to, contains the instructions if you want to use your own certificates! 

Kind regards

(CID:144313875)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:49 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:49 PM

Re: SSL certifacate request from DCO and upload

This comment was originally posted on DCIM Support by Boris on 2019-06-04


Hello Jef

The first of all you are right . In additional  this a new server with version 8.2.7 and old server is working properly (8.0.2) with AD via port 636 .

I have run check with command

open-ssl s_client -connect ipADserver:636 -CApath /etc/ssl/certs

I see in old and new server all chunk CA , but in end I got the follow:

Verify return error code : 20(unable to get local issuer certificate) .

Although the error code old server is working.

I have remove all authentications server and created again only one , but receive the same result .

How I can to debug this issue ?

The customer is working in DCE via port 636 properly too .

 

(CID:144313907)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:49 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:49 PM

Re: SSL certifacate request from DCO and upload

This comment was originally posted on DCIM Support by Boris on 2019-06-04


I have compared openssl s_client command and it’s same .

Is there any configuration into DCO that will be set ?

(CID:144313943)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:49 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:49 PM

Re: SSL certifacate request from DCO and upload

This comment was originally posted on DCIM Support by Jef Faridi on 2019-06-06


Hi Boris,

I don't use the openssl test, so not sure what to expect from it. As you know already, the following instructions:

 https://sxwhelpcenter.ecostruxureit.com/display/UADCO8x/Setup+an+AD+%28Active+Directory%29+Server

is the only way to configure the integration.

I don't think there are configurations that may need to be reset (in DCO). Without detail investigations it is hard to say what might be the issue with your setup.  However, the product security have been improved in later versions (compared to previous releases). I would recommend testing this AD integration on the latest 8.3 release, if you/customer should experience the same issue, then it would be great if I could have the following data:

screen captures illustrating the authentication server settings/configurations in DCO

screen capture of the displayed errors

complete server logs

I will send you an invite to my =S= box shortly, so the data safely can be shared with me (when/if you would), thanks. 

Kind regards

(CID:144867446)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:49 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:49 PM

Re: SSL certifacate request from DCO and upload

This comment was originally posted on DCIM Support by Boris on 2019-06-06


Many thanks Jef

in next week I attempt to send the relevant logs

(CID:144867522)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:49 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:49 PM

Re: SSL certifacate request from DCO and upload

This comment was originally posted on DCIM Support by Boris on 2019-06-13


Hello Jef

On Sunday I'll go to customer for this issue .

Can you provide to me what is log file I need to upload exactly ?

 

(CID:144869270)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:49 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:49 PM

Re: SSL certifacate request from DCO and upload

This comment was originally posted on DCIM Support by Jef Faridi on 2019-06-17


Hi Boris,

Log files (in DCO 8.2.7) can be collected from server webmin interface, StuxureWare DC Operation > Download Log Files > Download log files

please also include the time/date you've tried & seeing the issue (that helps us to search in the logs), thanks.

Kind regards

(CID:145424843)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:50 PM
0 Likes
3
215
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:50 PM

Re: SSL certifacate request from DCO and upload

This answer was originally posted on DCIM Support by Boris on 2019-07-03


Hello

The problem has been solved .

Important point the filed of the host into configuration of the Authentication Server will be same (but exactly ) such like to  certificate .

I suggest add this point to guide  

 

(CID:146278246)

See Answer In Context

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:50 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:50 PM

Re: SSL certifacate request from DCO and upload

This comment was originally posted on DCIM Support by Jef Faridi on 2019-07-03


Hi Boris,

Can you please clarify this, possibly add some screen captures, thanks.

Kind regards

(CID:146278253)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:50 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:50 PM

Re: SSL certifacate request from DCO and upload

This comment was originally posted on DCIM Support by Boris on 2019-07-03


(CID:146669723)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:50 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:50 PM

Re: SSL certifacate request from DCO and upload

This comment was originally posted on DCIM Support by Jef Faridi on 2019-07-03


Hi Boris,

Thanks. That's correct, Host filed should contain either the IP address or the qualified host name.

Kind regards 

(CID:146669797)

Share
DCIM_Support
Picard DCIM_Support
Picard
‎2020-07-05 07:50 PM
0 Likes
0
214
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content
‎2020-07-05 07:50 PM

🔒 Closed

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.

Share
Top Experts
User Count
APC_Steve
Lt. Commander APC_Steve Lt. Commander
2
GavanOB
Lieutenant GavanOB Lieutenant
1
lasalle_1
Crewman lasalle_1
1
Jef
Commander Jef Commander
1
tjlaw
Lieutenant JG tjlaw Lieutenant JG
1
See More Top Experts
Find a Service Provider
Find a certified partner to help you address your integration, installation, maintenance and project needs.
View all Providers
Support

Have a question? Please contact us with details, and we will respond.

Contact Us
FAQ

Look through existing questions to find popular answers.

Learn More
About

Want to know more about Exchange and its possibilities?

Learn More

Full access is just steps away!

Join Exchange for FREE and get unlimited access to our global community of experts.

Connect with Peers & Experts

Discuss challenges in energy and automation with 30,000+ experts and peers.

Get Support in Our Knowledge Base

Find answers in 10,000+ support articles to help solve your product and business challenges.

Ask Questions. Give Solutions

Find peer based solutions to your questions. Provide answers for fellow community members!

Register today for FREE

Register Now

Already have an account?Log in

About Us FAQ Terms & Conditions Privacy Notice Change your cookie settings
©2020, Schneider Electric