Generating non self signed certificate for ION9000/PM8000/ION7400 meters with OpenSSL

Issue
Example steps to create a certificate to upload to ION9000 or PM8000 or ION7400 using the meter's web interface.

Product
ION9000, PM8000, ION7400
High-End Platform (HEP) meters

Environment
This article refers to openssl, other applications could be used. Install openssl is not already installed on the computer generating certificate.

Resolution

File format upload is PEM format containing both the private key and certificate concatenated together.

1) Create a config file to be used with openssl. An example of the file contents can be seen below. Note that details will need to be changed to match the system.

ION9000-exemple.cnf

[req]
default_bits = 2048
prompt = no
default_md = sha256
x509_extensions = v3_req
distinguished_name = dn

[dn]
C = CA
ST = BC
L = City
O = Exmaple Company
OU = Exmaple Org Unit
CN = ion9000-example.example.com
emailAddress = email@example.com

[v3_req]
subjectAltName = @alt_names

[alt_names]
DNS.1 = *.ion9000-example.example.com
DNS.2 = ion9000-example.example.com
DNS.3 = ion9000-example

2) Open the command prompt

3) Run the following commands
openssl req -new -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365 -nodes -config <YOUR CONFIG FILE>
copy cert.pem + key.pem combined.pem

The file combine.pem is the file to upload to the meter.

Опубликовано для: Schneider Electric Казахстан