We use cookies on this website. To find out more about cookies and how they are used on this website, see our Privacy Policy.
By clicking ‘Continue’, you hereby agree with our use of cookies.

快速產品選擇

{{vmH.selected.familySearch.replace("EonStor ", "")}} Maintenance Guide

{{vmH.selected.familySearch.replace("EonStor ", "")}} User Guide

Maintenance Guide

Certificate management

KS / KS 5000U / KSi 5024U

EonKube uses self-signed certificates by default to secure communications between systems. Self-signed certificates are automatically generated and updated by the cert-management tool, and it will be renewed every three months.

However, the self-signed certificates are not authenticated by a third-party organization. To enhance the security, IEC supports the following ways of managing the certificate and here is the comparison between these methods:

Manage your certificateFeatures
Uploading a Certificate
  • Simple and easy configurations
  • Without external service dependency
Uploading a Certificate and Creating a CA Issuer
  • Automatically manage and update certificates
  • Centrally manage all certificates in specific namespaces or the whole cluster
Note:

This method requires a root certificate or an intermediate certificate.

Creating an Issuer (ACME Issuer) by Using with HTTP01 or DNS01 Challenges
  • Free certificate by using service providers such as Let’s Encrypt to complete domain name verification
  • Automatically manage and update certificates
Note:
  • The DNS provider must be supported by the cert-manager.
  • Before using this method, make sure that an external free certificate provider is compliant with the security policies in your organization.
Category

{{vm.sharedData.selected.modelSearch}}

{{vm.CategoryName}}