Activate SSL certificate and hide snapshots | NetApp | Page 1

prime wing Mar 14, 2025, 7:40 AM

#

Hello everyone,
I have two questions.

Firstly, I create new SSL certificates in the SVM system as follows:

netapp.ontap.na_ontap_security_certificates:
  common_name: "SVMNAME"
  name: "SVMNAME"
  type: server
  svm: "SVMNAME"
  expiry_time: 'P3650DT'
  key_size: 4096
  hash_function: sha256
  https: true
  use_rest: always
  validate_certs: false
  hostname: "CLUSTER"
  username: "USERNAME"
  password: "PASSWORD"

Now I would like to configure these in the SVM. I do this on the CLI as follows:

security ssl modify -vserver SVMNAME -serial SERIALNUMBER -ca SVMNAME -common-name SVMNAME

How can I do this via Ansible? The Ansible module doesn't seem to be able to do this, but can it be solved somehow, e.g. via na_ontap_rest_cli?

And the second question is how I can do the following in Ansible:

vserver nfs modify -vserver SVMNAME -v3-hide-snapshot enabled

Many thanks and best regards

hollow berry Mar 14, 2025, 5:25 PM

#

@prime wing

na_ontap_security_certificates module supports only create/install cert, please try with rest_cli.
There is no REST equivalent for v3-hide-snapshot, please refer https://docs.netapp.com/us-en/ontap-restmap/nfs.html#nfs-service-modify

nfs

prime wing Mar 25, 2025, 7:24 AM

#

Unfortunately, I can't activate it via rest_cli. Do you have an example of how to activate a previously created certificate?

#Activate SSL certificate and hide snapshots