How to properly generate certificate request for pool in hypervisor 8.2

[Miroslav Misik]

 Hello,

I would like to ask, how to properly generate certificate request for pool in hypervisor 8.2 (FQDN, SAN ...) and which method / command to use to install it?

I have installed hypervisor, requested certificate with FQDN (name of hypervisor server) a in SAN  I put IP address of this server.

Then I have installed this certificate into the hypervisor with command:

xe host-server-certificate-install certificate=cert.pem private-key=key.pem

Installation was success.

Then I created pool with this server.

I prepared second hypervisor with the same procedure (certificate FQDN and IP in SAN are from this second hypervisor).

But when I added this second server into the pool, info about installed certificate was removed.

So I am not sure, if the steps I have used for certificate request and install are correct.

 

Thanks

Miro

[Tobias Kreidl]

See if this FAQ helps: https://docs.citrix.com/en-us/xencenter/current-release/hosts-certificates.html

The full command suggested by Citrix is:
xe host-server-certificate-install certificate=path_to_certificate_file private-key=path_to_private_key [certificate-chain=path_to_chain_file] [host=host_name | uuid=host_uuid]

 

-=Tobias

[Miroslav Misik]

Thank you for help,

I did it by this help document, but I didn't see that parameter [host=host_name | uuid=host_uuid] anywhere.

But with this parameter it works.

Thanks again!

[Tobias Kreidl]

Miroslav,

Ah, great to hear! Mark as solved, if that's indeed the case, please, so others can benefit from the info.

Cheers,

-=Tobias