Documentation forSecurity Event Manager

CMC exportcertrequest using wildcards

For faster server setup, use a wildcard certificate in the exportcertrequest CMC command to secure a main domain and all first-level subdomains with just one file. For example, use *.example.com to secure blog.example.com and shop.example.com.

When using the exportcertrequest CMC command in SEM, you can enter custom certificate parameters, including a wildcard in the host portion of the FQDN, such as *.mydomain.com.

 

  1. Connect to the SEM Console Management Center (CMC). See Log in to the SEM CMC command line interface.

  2. At the cmc menu prompt, type manager and press Enter.

  3. Type exportcertrequest and press Enter. The default certificate parameters are displayed.

  4. At the Would you like to use these default parameters prompt, type n and press Enter.

  5. Press Enter to accept each of the defaults for the following prompts:

    1. Enter the key length (default: 4096):

    2. Enter the RSA signature algorithm (default: SHA512)

    3. Enter the DN (default: CN-swi-sem, OU=Security, 0=SolarWinds, C=US):

  6. At the Enter SAN entry type <dns/ip>, or press <Enter> to finish: prompt, type dns and press Enter.

  7. For Enter value for DNS SAN entry (default: swi-sem), type *.mydomain.com and press Enter.

  8. At the Enter SAN entry type <dns/ip>, or press <Enter> to finish prompt, press Enter.

  9. Confirm the custom certificate parameters summary is correct and wait for the CSR to be created.

  10. At the prompt to export the Certificate Signing Request to a network share or print to the console, enter either S or P, to send to a network share or to print the console, respectively.

    When exporting to a network share, you will need the Windows share name, username, and password.

  11. Press Enter.

  12. At the prompts, provide each of the following, pressing Enter after each entry:

    1. Network share path (e.g. \\myserver\myshare)

    2. Username, including domain information (e.g. DOMAIN\user)

    3. Password

  13. Look for the status indicating the connection and login was successful and that the certificate was successfully exported.

Wildcards can also be used with the importcert command to import signed certificates with custom SANs back into SEM.