Hi Marcin,
Thanks for the forum post.
This
link
contains the
steps for configuring an SSL certificate in PMP. For the step -3,
you will submit the CSR to a third party signing authority or get
the certificate signed using you internal CA sign tool.
If
you are going for third party CA signing tool then you should
have the option to use SAN in their website while getting the
CSR signed. If it is internal CA then please follow the steps
below to create server certificate with SubjectAlternativeName.
- Connect to the server where Microsoft Certificate Service is running
- Open a command prompt and execute certutil -setreg policy\EditFlags +EDITF_ATTRIBUTESUBJECTALTNAME2
- Then, restart Microsoft Certificate Service( certsvc)
- Create the private key using the below command,
./keytool -genkey -alias pmp -keyalg RSA -keypass <privatekey_password> -storepass <keystore_password> -validity <no_of days> -keysize 2048 -keystore pmp.keystore
- Create the Certificate Signing Request(CSR) using the below command:
keytool -certreq -keyalg RSA -alias pmp -keypass <privatekey_password> -storepass <keystore_password> -file <csr_filename> -keystore pmp.keystore
-
Submit CSR request to Microsoft Internal CA
- Open IE and go to your CA's certificate request page- Request advanced certificate- Submit a certificate request- Copy and paste content of <csr_filename> file- Certificate template should be Web Server- In "Additional Attributes", enter san:dns=pmp&dns=pmp.manageengine.com and click submit- Download the certificate chain in base64 format as pmpcert.p7b
- Import the downloaded pmpcert.p7b file into the pmp.keystore
Please try the same and let us know it goes.
Thanks & Regards,
Chris
[Technical Consultant | Password Manager Pro]
Chris
[Technical Consultant | Password Manager Pro]