---
title: "How to generate new self-signed certificate in HP c7000 enclosure"
date: "2015-03-09T14:36:04Z"
tags: ["Certificate", "HPE", "HPE c7000"]
categories: ["Hardware & HomeLab", "Networking & Security"]
---

![SSH][1]

For a period of days I am working on replacing self-signed certificates in my environment and I found one issue with my enclosure. My certificate authority supports only 2048 Bits Certificate Signing Requests and in my case enclosure had 1024 Bits certificate. I found solution how to quickly fix problem and replace self-signed certificate.
<!--more-->
<!--adsense-->
# Hardware details:

HP c7000 enclosure

Onboard Administrator: 4.30

![How to generate new self-signed certificate in HP c7000 enclosure - certificate info][2]

# How to generate 2048 Bits certificate

Procedure itself is really simple. According to HP documentation http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c03659074 if you reset Onboard Administrator then new key will be generated.

## HP info

To switch from 1024-bit to 2048-bit keys you needed to first reset the OA configuration to factory defaults which would cause the generation of new keys.

## Certificate generation

Starting from Onboard Administrator version 3.56 you can do it easier.

![How to generate new self-signed certificate in HP c7000 enclosure - certificate info - 2][3]

Simply login to Onboard Administrator using SSH and execute this command

```
generate key all 2048
```

You will be asked if you want to regenerate private keys. Answer yes and Onboard Administrator will be restarted.

![How to generate new self-signed certificate in HP c7000 enclosure - confirm ][4]

After restart you will have new fresh 2048 Bits certificate.

![How to generate new self-signed certificate in HP c7000 enclosure - new 2048 Bits key][5]

Repeat same step for second Onboard Administrator.

[1]: /images/uploads/2015/03/ssh.webp
[2]: /images/uploads/2015/03/how-to-generate-new-self-signed-certificate-in-hp-c7000-enclosure-1.webp
[3]: /images/uploads/2015/03/how-to-generate-new-self-signed-certificate-in-hp-c7000-enclosure-2.webp
[4]: /images/uploads/2015/03/how-to-generate-new-self-signed-certificate-in-hp-c7000-enclosure-4.webp
[5]: /images/uploads/2015/03/how-to-generate-new-self-signed-certificate-in-hp-c7000-enclosure-5.webp