Exporting a server certificate, Creating a certificate signing request – HP Systems Insight Manager User Manual

Page 159

Advertising
background image

Installing OpenSSH

Managing SSH keys

Exporting a Server Certificate

Export the HP Systems Insight Manager (HP SIM) server

certificate

to a file to facilitate deployment of the

certificate into your browsers. This certificate enables a browser to properly identify the HP SIM server and
is a public document, so it does not need to be kept private. If the certificate is kept publicly accessible,
ensure it cannot be modified.

NOTE:

The system certificate can be exported as a Base 64 encoded certificate. The exported certificate

can be imported into a browser or the Trusted Management Servers List.

To export the server certificates from HP SIM:

1.

Select Options

SecurityCertificatesServer Certificates, and then click Export.

The Internet Explorer File Download dialog box appears.

2.

Click Save. You can click Cancel to abort the file download operation and return to the Server
Certificate

page. The file is exported and saved.

Related procedures

Creating a server certificate

Importing a server certificate

Editing a server certificate

Synchronizing certificates

Related topics

Server certificates

Networking and security

Installing OpenSSH

Managing SSH keys

Creating a certificate signing request

Create a Certificate Signing Request (CSR) to replace the HP Systems Insight Manager (HP SIM)

Secure

Sockets Layer

(SSL) server certificate and

private key

.

To create a certificate signing request:

1.

Select Options

SecurityCertificatesServer Certificates, and then click Import. The Import

Server Certificate

section appears.

2.

Click more next to Create a Certificate Signing Request (CSR).

The Create Certificate Signing Request section appears below the Import Server Certificate section.

Note: The current certificate parameters are shown. Selecting to create a CSR does not create a new
key-pair or change any certificate parameters. If you want to create a new key-pair, create a new
certificate. If you want to modify the certificate parameters, click Edit instead of Import on the Server
Certificate

page.

3.

Click Create to create a PKCS #10 signing request that is downloaded through a standard browser.
In Internet Explorer, use the File Download dialog box. In Mozilla, save the text in the new browser
window to a file.

4.

Send the certificate file to a

Certificate Authority (CA)

, which can be internal or external.

Note: The existing

self-signed certificate

is still valid, so the SSL web server remains operational for

browsing until the signed certificate is received from the CA.

Server certificates 159

Advertising