{{vmH.selected.familySearch.replace("EonStor ", "")}} User Guide

Maintenance Guide

Choose Your Product

Certificate management

KS / KS 5000U / KSi 5008U

EonKube uses self-signed certificates by default to secure communications between systems. Self-signed certificates are automatically generated and updated by the cert-management tool, and it will be renewed every three months.

However, the self-signed certificates are not authenticated by a third-party organization. To enhance the security, IEC supports the following ways of managing the certificate and here is the comparison between these methods:

Manage your certificate	Features
Uploading a Certificate	Simple and easy configurations Without external service dependency
Uploading a Certificate and Creating a CA Issuer	Automatically manage and update certificates Centrally manage all certificates in specific namespaces or the whole cluster Note: This method requires a root certificate or an intermediate certificate.
Creating an Issuer (ACME Issuer) by Using with HTTP01 or DNS01 Challenges	Free certificate by using service providers such as Let’s Encrypt to complete domain name verification Automatically manage and update certificates Note: The DNS provider must be supported by the cert-manager. Before using this method, make sure that an external free certificate provider is compliant with the security policies in your organization.

{{vmH.selected.familySearch.replace("EonStor ", "")}} Maintenance Guide

{{vmH.selected.familySearch.replace("EonStor ", "")}} User Guide

Maintenance Guide

Certificate management

Note:

Note:

{{vm.sharedData.selected.modelSearch}}

{{vm.CategoryName}}

{{newsItem.Question}}