跳转到主内容

ONTAP自动生成证书名称时的命名规则是什么?

i
Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

问题解答

自动设置cert-name 时,它将与 common-name 同名。但是,如果  已存在具有相同common-name 的证书,并且其有效期尚未到期,则  cert-name  将采用<common-name>_<serial> 的形式。
 
示例

ontap912::> security certificate create -common-name test -type server -vserver ontap912
The certificate's generated name for reference: test

ontap912::*> security certificate create -common-name test -type server
The certificate's generated name for reference: test_1812D5EF5CFFB4C1

ontap912::> security certificate show -common-name test
Vserver   Serial Number   Certificate Name             Type
---------- --------------- -------------------------------------- ------------
ontap912   1812D587C662AC6F
              test                  server
   Certificate Authority: test
      Expiration Date: Sat Dec 20 17:33:05 2025

ontap912   1812D5EF5CFFB4C1
              test_1812D5EF5CFFB4C1          server
   Certificate Authority: test
      Expiration Date: Sat Dec 20 17:40:30 2025

2 entries were displayed.

此外,如果common-namevserver 名称相同,则序列号将无条件附加到cert-name

ontap913::> security certificate show -fields vserver,common-name,serial,ca,type,expiration -type server -vserver test1
vserver common-name serial       ca    type   subtype cert-name expiration
------- ----------- ---------------- ------- ------ ------- --------- ------------------------
test1   zhuolin    1830966EAE1B6E0C zhuolin server -     zhuolin   Fri Mar 27 15:54:17 2026

ontap913::> security certificate create -common-name test1 -type server -vserver test1

The certificate's generated name for reference: test1_182D857C8EAA53B4

ontap913::> security certificate show -fields vserver,common-name,serial,ca,type,expiration -type server -vserver test1
vserver common-name serial       ca   type   subtype cert-name        expiration
------- ----------- ---------------- ----- ------ ------- ---------------------- ------------------------
test1   test1     182D857C8EAA53B4 test1 server -     test1_182D857C8EAA53B4 Tue Mar 17 16:10:00 2026 
test1   zhuolin    1830966EAE1B6E0C zhuolin
                      server -     zhuolin         Fri Mar 27 15:54:17 2026
2 entries were displayed.