Generate CSR

[henk_stobbe]

I want to get my own certificates (for a Managed Environment), there are nice info about how to generate a CSR per platform type. What is the correct procedure for me to choose? And are there other things I should know about?

I found the documentation to install the certificate, but there is little info about above,

KR Henk

[Radoslaw_Szulgo]

Hi Henk,

In Dynatrace Managed we can set up a SSL certificate on your behalf and install it on all nodes and SGs. Is that sufficient to you?

Take a look at the Settings screenshot:

[henk_stobbe]

Hi Radoslow,

We have are own Dynatrace Managed installation, so we can not use the Dynatrace certificate. Sorry

KR Henk

[oktoraarigi]

how about this problem, has it been solved? I'm having the same problem.

[Radoslaw_Szulgo]

If you already have a certificate. Just download following files from you CA provider:

• Server certificate (.cer or .cert )
• Root and Intermediate certificates (.cer or .cert )
• Private key for certificates (.pem )

And paste contents to the UI presented in Help.

If you don't have a certificate yet, then use OpenSSL toolkit to generate CSR and provide it to the CA you have selected in order to request a valid certificate.

I'm not sure if it's clear enough to you, but the automatic certificate that you can get for free from Dynatrace is a valid certificate, verified by CA (Let's Encrypt) - it's not the self-signed by Dynatrace.

[Babar_Qayyum]

Hello @Radoslaw S.

I wanted to generate a CSR certificate to use customer own CA certificate, therefore, let me know the procedure to generate the CSR and share with them.

Regards,

Babar

[henk_stobbe]

Hi Radoslaw,

Our cluster has and url that will end with *.atos.net so the certificate *.dynatrace.com will not work (-; sorry,

KR Henk

[Radoslaw_Szulgo]

in case you rely on dynatrace's certificates, we create a subdomain of managed-dynatrace.com for you + a valid certificate for that domain.

What's the issue you currently have?

[Radoslaw_Szulgo]

Afzal, do you need help with that? I can assist.