What are the types and purposes of the certificates included in ONTAP?
Applies to
ONTAP 9
Answer
In ONTAP, there are several types of certificates, each serving different purposes:
server
: Used to secure communications between clients and the ONTAP system. These certificates authenticate the identity of the server to the client and establish an encrypted connectionclient
: Used to authenticate the identity of the client to the server. These certificates are often used in mutual TLS (mTLS) scenarios where both the client and server need to verify each other's identityroot-ca
: A "root-ca
" refers to a root Certificate Authority (CA) certificate, which is the top-most certificate in a public key infrastructure (PKI) hierarchyserver chain
: A "server-chain
" typically refers to a chain of certificates that are used to establish the authenticity of a server's certificate. This chain includes the server's certificate, intermediate certificates, and the root certificateserver-ca
: A "server-ca
" certificate typically refers to a server certificate that is issued by a Certificate Authority (CA). This certificate is used to authenticate the identity of a server to clients and to establish secure, encrypted communications.client-ca
: A "client-ca
" typically refers to a client certificate that is issued by a Certificate Authority (CA). This certificate is used to authenticate the identity of a client to a server, enabling secure, mutual authentication and communication.
Additional Information