Synchronizing certificates – HP Systems Insight Manager User Manual

Page 161

Advertising
background image

1.

Select Options

SecurityCertificatesServer Certificates, and then click Import. The Import

Server Certificate

section appears.

2.

Click more next to Import signed certificate reply from CA. The Import Signed Certificate Reply
section appears below the Import Server Certificate section.

3.

Click Browse next to the Certificate filename field. The Choose file dialog box appears.
a.

Navigate to the location where the signed certificate is stored.

b.

Select the correct file name, and click Open.

The file name appears in the Certificate filename field.

4.

Click Import. The signed certificate is imported.

After creating a CSR or importing the server certificate, reboot the HP SIM server for the HP SIM server
certificate to be synchronized with the System Management Homepage certificate and the certificate
sharing directory. Synchronizing the certificates prevents repeated browser security alerts when browsing
to HP Insight Management Agent on the HP SIM server, which enables HP SIM and the local System
Management Homepage to update their

Secure Sockets Layer (SSL)

server certificates and private

keys

.

Related procedures

Importing a server certificate

Creating a certificate signing request

Submitting a certificate signing request

Related topics

Server certificates

Networking and security

Installing OpenSSH

Managing SSH keys

Synchronizing certificates

When the HP Systems Insight Manager server certificate is created or modified, the public and private

certificate key

pair of the System Management Homepage certificate is overwritten with the HP Systems

Insight Manager public and private key pair.

NOTE:

This feature is available in the unlikely event that the certificates become unsynchronized for an

unknown reason.

NOTE:

For the certificate sharing feature to work in HP-UX, OpenSSL must be installed in the

/OPT/APACHE/SSL/BIN/

directory (default for HP-UX installs). For the certificate sharing feature to work

in Linux, OpenSSL must be installed in the /USR/BIN/ directory (default for Linux installs).

Related procedures

Creating a server certificate

Exporting a Server Certificate

Importing a server certificate

Editing a server certificate

Related topics

Server certificates

Networking and security

Replicating trusted certificates

Installing OpenSSH

Managing SSH keys

Server certificates 161

Advertising