Troubleshoot SSL Certificate Issues

TOC

BacktoTop

SSL certificates

Generally, EMC products are distributed with a self-signed SSL certificate. If you receive an SSL certificate error or a blank pane when you are attempting to access content served by a data source, resolve the issue by doing one of the following procedures.

SSL certificate error examples provides a list of sample errors.

Temporary resolution

Accept the certificate exception temporarily: Troubleshooting an SSL certificate error: Accepting the exception.

Permanent resolution

Add an SSL certificate to your truststore to permanently prevent the exceptions from appearing.

You can: Perform:
Install the self-signed SSL certificate that is provided with the EMC product using an Internet Explorer browser. Installing a self-signed SSL certificate from an Internet Explorer browser
Install the self-signed SSL certificate that is provided with the EMC product using a Chrome or Firefox browser.
  1. Export the self-signed SSL certificate to save it to the export location: Exporting an SSL certificate from an Internet Explorer browser
  2. Importing an SSL certificate into your truststore
Import an exported SSL certificate that you or another administrator prepared. Importing an SSL certificate into your truststore

If you need to prepare an SSL certificate to share with other users, use: Exporting an SSL certificate from an Internet Explorer browser.

BacktoTop

SSL certificate error examples

The SSL certificate error or a blank pane appears because the certificate is self-signed and it is not added as an exception or into the truststore yet. For example, if you are attempting to access content served by a data source, a blank pane appears when you select views under SolutionPacks.

Chrome error examples

This site's security certificate is not trusted!

Or, a blank pane.

Firefox error example

This Connection is Untrusted

Internet Explorer error examples

There is a problem with this website's security certificate.

Content was blocked because it was not signed by a valid security certificate.

BacktoTop

Troubleshooting an SSL certificate error: Accepting the exception

An SSL certificate error appears in your browser.

To resolve this issue,

Procedure

Accept the exception.
Steps may vary for your browser. For example, for Internet Explorer, click Continue to this website (not recommended).
This temporary solution causes the exception to be ignored for the current browser session, but the exception reappears if you open another browser tab or window.
BacktoTop

Installing a self-signed SSL certificate from an Internet Explorer browser

Install the self-signed SSL certificate that is provided with the EMC product to prevent certificate exception errors.

The following procedure is for Internet Explorer version 9.0. The steps may vary slightly depending on your browser version.

Procedure

  1. Click Continue to this website (not recommended) in the browser window.
  2. Click the red Certificate Error indicator next to the address bar.
  3. In the Untrusted Certificate window, select View certificates.
  4. In the Certificate dialog box, in the General tab, click Install Certificate.
  5. Follow the instructions in the Certificate Import Wizard.
    1. Select the Place all certificates in the following store setting to add the certificate to your truststore.
  6. In the Certificate dialog box, in the General tab, click OK.

After you finish

Refresh the browser window.

BacktoTop

Importing an SSL certificate into your truststore

Import an SSL certificate into your truststore to prevent certificate exception errors.

BacktoTop

Importing an SSL certificate in Chrome

For Chrome, use this procedure to import the certificate into your truststore.

The following procedure is for Chrome version 28.0.1500.95. The steps may vary slightly depending on your browser version.

Procedure

  1. Go to Settings > Show advanced settings.
  2. Scroll down and select HTTP/SSL > Manage Certificates.
  3. In the Trusted Root Certification Authorities tab, click > Import.
  4. Follow the instructions in the Certificate Import Wizard to import the certificate.
  5. Click OK in Internet options.
  6. Refresh the browser window.
BacktoTop

Importing an SSL certificate in Firefox

For Firefox, use this procedure to import the certificate into your truststore.

The following procedure is for Firefox version 23.0. The steps may vary slightly depending on your browser version.

Procedure

  1. Go to Firefox > Options > Options.
  2. Click Advanced.
  3. In the Certificates tab, click > View Certificates.
  4. Click Import.
  5. Locate the certificate file and click Open.
  6. Click Save.
  7. Click OK in Certificate Manager.
  8. Refresh the browser window.
BacktoTop

Importing an SSL certificate in Internet Explorer

For Internet Explorer, use this procedure to import the certificate into your truststore.

The following procedure is for Internet Explorer version 9.0. The steps may vary slightly depending on your browser version.

Procedure

  1. Go to Tools > Internet options.
  2. In the Content tab, click > Certificates.
  3. Select the Trusted Root Certification Authorities tab.
  4. Click Import.
  5. Follow the instructions in the Certificate Import Wizard to import the certificate.
  6. Click OK in Internet options.
  7. Refresh the browser window.
BacktoTop

Exporting an SSL certificate from an Internet Explorer browser

Use this procedure to export a self-signed SSL certificate, so that you can either import the resulting exported certificate into your truststore or share it with other users.

The following procedure is for Internet Explorer version 10.0. The steps may vary slightly depending on your browser version.

Procedure

  1. Access the host for which you want to export the SSL certificate from the browser.
    For example: https://<myHostname>.emc.com
  2. Select Continue to this website (not recommended) in the There is a problem with this website's security certificate window.
  3. Click the red Certificate Error indicator next to the address bar.
  4. In the Untrusted Certificate window, select View certificates.
  5. In the Certificate dialog box, select the Details tab and ensure that the Show field is set to All. Click Copy to File.
  6. In the Certificate Export Wizard,
    1. Click Next in the Welcome screen.
    2. Click Next to accept the default DER encoded binary X.509 setting in the Export File Format screen.
    3. Browse to the location where you want to save the certificate.
    4. Specify the certificate file name and click Save.
    5. In the File name field, ensure that the location and the certificate file name are correct. Click Next.
    6. Click Finish.
    7. Click OK when The export was successful appears.
  7. In the Certificate dialog box, click OK in the Details tab.
  8. Share the resulting exported SSL certificate with other users to use.