Install Windows 2019 CA - Certificate

TrueNAS General
1

I have installed TrueNAS Scale (24.04.2.1) and would like to install a Certificate created by a Windows CA. Though I understand that I do not truly need the site to be secured (as I do not access outside of my network) - I just have a “thing” about the “Not Secure error” when I am using the site. Below is what I have attempted:

(1) Credentials > Certificates > Add Certificate
(2) Clicked ADD
(3) Created an Identifier
(4) Type: Import Certificate
(5) Profile: HTTP RSA Cert
(6) Here is the problem - in the “Certificate Field” I am not able to determine what information is required. None of the documentation I could find actually indicated what was needed. Basically, what data is needed for this field.

So far anything I put in the field generates “parsing errors”.

Note: I created the CSR from TrueNAS

Any help would be appreciated.

2

What’s required there is the PEM-encoded certificate. It looks like this:

-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISBH4I09alOGJtoJPcR2TDeoTIMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTEwHhcNMjQwOTI0MDIwMzQyWhcNMjQxMjIzMDIwMzQxWjAYMRYwFAYDVQQD
DA0qLnRydWVuYXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
m09aOObtubze4I2tsL9zvzcoO4HIf6hPoFt86wLzvra7n6AjTKaZP5IPr9sAQGT9
1aCevOJx0UweKsKU9osVPwBK+CjAJxCCZ52n3rvu3apoJK8/DTt4s4lOD6QRLMQ7
VUFQXIPl7jFS3yXSEXahnFLbQOCKqTEAnzp9FFIHA83ctj7It3UbFVdgPCXLMfae
qwGDnrlXDa0orm3RfV7YI17xzwyGBrXUN1Ro0vTc/P2QsANsahDoCLbcADFTGwKj
6o9ujVpmldJYiyPPviaj7/AfFf2ozD5g3Z90o8bM0ttC7nJ4sUWnV9QDC/0YZa1w
IdHJIUZ6OxZMsx15UW0hewIDAQABo4ICLTCCAikwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQeMlW2aCOt8z5y1ECWsIqV4nN4KDAfBgNVHSMEGDAWgBTFz0ak6vTDwHps
lcQtsF6SLybjuTBXBggrBgEFBQcBAQRLMEkwIgYIKwYBBQUHMAGGFmh0dHA6Ly9y
MTEuby5sZW5jci5vcmcwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTEuaS5sZW5jci5v
cmcvMDUGA1UdEQQuMCyCDiouaXhzeXN0ZW1zLmNvgg0qLnRydWVuYXMuY29tggt0
cnVlbmFzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB1AN/hVuuqBa+1nA+GcY2owDJOrlbZbqf1pWoB0cE7vlJcAAABkiH6
vVIAAAQDAEYwRAIgduS3pw1T6PDf1EThv20Kg2UZOBUpVtmPovGMI5G53ToCICCv
mMtmZj37MeWYSW0FvzEiM101zPWJshK56Z5zP1ezAHYASLDja9qmRzQP5WoC+p0w
6xxSActW3SyB2bu/qznYhHMAAAGSIfq94wAABAMARzBFAiEA6OEVzoUQJvyrLtiY
XPWWZJnZHYWq3RlKSdQDY+777q0CICcpIINPMt59cccyk2qbCb7Q0aXu25nxiiX2
K3LYA27sMA0GCSqGSIb3DQEBCwUAA4IBAQBdfm7CSpw2DcXBnarRn4XwrJSSa5B3
05QgINMIzFcwNQFebvRlcxuyGSAfYFlxicEiHnymhQ9Si5eb0nhud20g6H+szGPh
9nlkWfvtmgF9cBatRSFclNmTOc9X7cXwu21hdp9nPWZXwDrAJmFNYx8VG9mZgS+k
p8C4CoTo3u0QsgosJ/CAbLpQJLqDsUZu1b/aPaLqxf/ArNi5vGWBtEBthUpSBCEb
aHN8pPxV/yvUKHSJMn5R6oNueENvMBR5KZSem6WdhkOZyU/Q9iNtFjixFm27uS5I
ntCW3ret09qVquEJK5TZt9DrYC++70J2C/e/alhYlW1wK9qiv6J0UtQ5
-----END CERTIFICATE-----
1 Like
3

Dan -

Thanks this helpful, I will chase this down and let you know what happens. Again, thanks for the response.

4

Your suggestion pointed me in the correct direction. I was able to find a way to export the cert in the format you suggested and was able to import the cert. Now I am running into the dreaded cert not valid issue. I am going through the post you from you concerning this issue. Again, thanks for the help.