NetApp ONTAP Security icon

NetApp ONTAP Security

Manage NetApp ONTAP security settings, users, roles, and certificates

Actions34

Certificate → Create (Self-Signed)

AI-generated

Summary

Create a self-signed certificate in a NetApp ONTAP cluster, specifying certificate details and optional metadata.

Inputs

  • Cluster Host (required) — The hostname or IP address of the ONTAP cluster management LIF where the certificate will be created.
  • Port — HTTPS port for the ONTAP REST API, defaulting to 443.
  • Common Name (required) — The common name (CN) for the certificate, typically a DNS name or IP address.
  • Certificate Type (required) — Type of the certificate to create, such as server, client, root CA, etc.
  • SVM — Optional Storage Virtual Machine (SVM) name to scope the certificate; omit for cluster-scoped certificates.
  • Additional Options — Optional metadata for the certificate including country, state, locality, organization, unit, email, expiry days, hash function, and key size.

Output shape

a single record representing the created certificate or async job result

The output includes the created certificate details or job information if the creation is asynchronous. The node polls until job completion by default, returning the completed job's data.

Examples

Example 1: Create a server-type self-signed certificate scoped to a cluster with a common name 'cluster.example.com', a 2048-bit key, SHA256 hash, and a 365-day expiry.

Set Cluster Host to the cluster management IP, Certificate Type to 'server', Common Name to 'cluster.example.com', and adjust Additional Options for keySize, hashFunction, and expiryDays.

Links

Discussion