Re: Renewing DCM cert

["Larry \"DrFranken\" Bolhuis" <midrange@xxxxxxxxxxxx>]

I believe the 1 year max is an agreed limit, period. While I agree that 
things are changing quickly it does effectively make it impossible to 
keep valid certificates on everything such as HMCs and Network switches 
and Fiber Switches and Web servers and VTLs and and and.....

And that trains us to instinctively ignore those 'this site is insecure' 
messages as a matter of course, and just accept whatever self signed 
thing is on the device, despite it being old and expired.

I guarantee I continue past that message fifty times a day, every day!

So while the logic is good, I'm not sure the end effect is as positive 
to security as intended.

	- DrF

On 1/17/2022 3:02 PM, Brad Stone wrote:
> I've never got "renew" to work.  I always just do a new CSR and get a new
> cert.  Most places now only allow a year at a time max, even if you buy a 2
> or more year cert.  Probably not a bad idea with how fast technology
> changes.
>
> On Mon, Jan 17, 2022 at 1:03 PM Justin Taylor <jtaylor.0ab@xxxxxxxxx> wrote:
>
> > DCM handled the .PFX file just fine, my trouble is with the renew option.
> > I'll just continue my search.
> >
> > Thanks
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at https://archive.midrange.com/midrange-l.
> >
> > Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> > questions.
> >
> > Help support midrange.com by shopping at amazon.com with our affiliate
> > link: https://amazon.midrange.com