Data storage
Pure Storage FlashArray
Create a FlashArray certificate and construct a CSR
3 min
before enabling rdl on the flasharray, the array and the {{ch}} must establish a mutual trust relationship by validating their respective digitally signed certificates notes about certificates certificates used on the flasharray must be pem formatted (base64 encoded) intermediary certificates are not supported for use with kmip using the purity internal management certificate for kmip configuration is not supported in the following sections, we will use the flasharray command line interface (cli) to generate a flasharray certificate and construct a certificate signing request (csr) generate a flasharray certificate perform the following steps to generate a flasharray certificate use the following purecert create cli command to create a self signed certificate pureuser\@purefa ct0 # purecert create cert 1 self signed common name purefa display the certificate by using the following purecert list command (copy the displayed certificate for use in a later step ) pureuser\@purefa ct0 # purecert list cert 1 certificate construct a certificate signing request (csr) perform the following steps to construct a csr use the following purecert construct command to construct a csr pureuser\@purefa ct0 # purecert construct cert 1 certificate signing request copy the csr that is displayed in the terminal and paste it into a file editor save the file with either the pem or csr extension then, move the file via sftp or other means to the external storage device configured on the {{ch}}