| If |
Article #: KA-03836
Published: Jul/02/2025
Last reviewed: Jul/02/2025
How to update the G5 self signed certificate
Contents
Introduction
The G5 PDU uses certificates to authenticate and secure the communication between the client and PDU web interface. The certificate is will expire after a period of time and will require replacement.
Purpose
The procedure in this document will show you a method of generating a replacement certificate. There are other methods of creating the certificate so if you feel you cannot install the tool required to perform this please look at other methods using PowerShell.
Requirements
A computer with OpenSSL installed.For this example I have used Shining Light Productions installer, but you should be able to use other UpToDate versions of OpenSSL. https://slproweb.com/products/Win32OpenSSL.html
Procedure
- Download and install OpenSSL
- Open the OpenSSL command prompt.
- Generate a certificate key using the command “openssl genrsa -out cert.key 2048”
- Open a new notepad document and enter the contents from the textbox below modifying to suit your environment: C=Country, ST=State, L=Location, 0=Organisation, OU=Organisational unit, CN=Common Name(The PDU’s System Name), IP.1= IP Address, DNS.1=Same as Common Name.
- [req]
distinguished_name = req_distinguished_name
req_extensions = req_ext
prompt = no
[req_distinguished_name]
C = UK
ST = Glos
L = Coleford
O = Panduit
OU = IMS
CN = G5BLK.Panduit.com
[req_ext]
subjectAltName = @alt_names
[alt_names]
IP.1 = 192.168.10.49
DNS.1 = G5BLK.Panduit.com - Save the file as “pdu.cnf” to the location the certificate key has been generated which should be in “c:\User\<Username>”
- From the OpenSSL prompt type “openssl req -new -key cert.key -out G5request.csr -config pdu.cnf” and hit return key.
- From the OpenSSL prompt type “openssl req -x509 -sha256 -days 7300 -key cert.key -in G5request.csr -out cert.crt -copy_extensions copyall” and hit enterkey. You will see a warning “Warning: Not placing -key in cert or request since request is used” which you can ignore.
- Open a browser to the PDU you are updating the certificate and log in as an administrator.
- Select the Gear icon>Network Settings.
- Select the pencil icon next to “Web/ RESTapi Access Configuration”
- Select the “choose file” button for SSL Certificate and browse to the location you have generated the certificate “c:\Users\<Username>” and select the certificate “cert.crt”.
- Select the “choose file” button for the SSL Certificate Key and browse to the same location as the certificate to select the “cert.key”.
- Click Save.
- When prompted check the “do you really want to apply changes now” box and the click apply.
Troubleshooting
If you find you are unable to open the web interface after applying the new certificate it probably due to an error with you certificate. In order to gain access to update the certificate you will need to enable http access. This is only possible if you have ssh enable on the PDU which is on by default else you will have to do a reset to defaults by holding in the reset button for 20 second.
- Open puTTY or an alternative ssh client and connect to the PDU.
- Login using your admin credentials
- Type “net http on” and hit enter key.
- Type “y” and hot enter key to accept and reboot controller.
- When the controller has rebooted enter “http://<IP Address>” of PDU in the browser and log in.
- You should now be able to replace the certificate with a corrected one.
Panduit.com SystemSupport@panduit.com 1-866-721-5302 Article: KA-03836