Required Dell Technologies certificates

The following table lists the endpoints and certificates that are required for Dell EMC OpenManage Enterprise and Dell SupportAssist Enterprise (SAE).

Do not copy these certificates to the Azure Stack Hub deployment folder. Instead, provide these certificates during installation of OpenManage Enterprise and SAE.

Table 18.           Required certificates for OpenManage Enterprise and SAE

For more information, see “Security Certificates” in the Dell EMC OpenManage Enterprise Version 3.1 User's Guide.

Generating Azure Stack Hub certificate signing requests 

The Microsoft Azure Stack Hub Readiness Checker tool is available from the PowerShell Gallery. The tool creates Certificate Signing Requests (CSRs) for an Azure Stack Hub deployment. Certificates should be requested, generated, and validated with enough time to test before deployment.

The Azure Stack Readiness Checker tool (AzsReadinessChecker) performs the following certificate requests:

• Standard Certificate Requests—Request according to Generate PKI Certificates for Azure Stack Deployment
• Request Type—Specifies whether the Certificate Signing Request is a single request or multiple requests
• Platform-as-a-service (PaaS)—Optionally request PaaS names for certificates, as specified in the Azure Stack Hub public key infrastructure certificate requirements > Optional PaaS certificates

Required Extension Host certificates

The implementation of Microsoft Extension Host requires two wildcard SSL certificates, one for the admin portal and one for the tenant portal. Customers who have deployed Azure Stack Hub systems must provide these two additional certificates.

For more information, see Azure Stack Hub public key infrastructure certificate requirements > Validate.

Certificate checker tool

You can use the Azure Stack Readiness Checker tool to validate that the generated PKI certificates are suitable for predeployment. When you validate certificates, schedule enough time to test and get certificates reissued if necessary.

Important: Treat the PKI certificate PFX file and password as sensitive information.

Additional information

For the latest certificate requirements and validation instructions, see the Microsoft Azure Stack Hub public key infrastructure certificate requirements.