About Certificates

At installation time, the Exalead CloudView installer generates a self-signed certificate.

However, it is best to generate your own certificate signed by a trusted certificate authority for production located at:

  • The public certificate, DATADIR/security/<hostname>-<instance>.cert for example, DATADIR/security/server001.exalead.com-cvdefault.cert

  • The Private key, DATADIR/security/<hostname>-<instance>.key for example, DATADIR/security/server001.exalead.com-cvdefault.key

This page discusses:

See Also
Import an Existing Certificate

Public Certificate

The public certificate is saved in a DER format to facilitate the integration with Java tools (certification import/export in trust stores, etc.).

The requirements for the certificate are as follows:

  • Generated key length must be: 2048 bits.

  • Modulus must be: 2048 bits.

  • SHA-2 certificates are supported.

Private Key

The Private key (.key file) is stored in a standard not encrypted PEM file format. The generated key length must be 2048 bits. It must use the following headers and footers:

-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----