HP XP7 Storage - Manual (Page 15)

4. Complete the following information:
•
Country Name (two-letter code)
•
Email Address
•
(Optional) Challenge password
•
(Optional) Common name - To obtain a signed and trusted certificate, ensure that the
server name is the same as the host name of the storage device.
•
State or Province Name
•
Locality Name
•
Organization Name
•
Organization Unit Name
•
Common Name
5. Send the public key to the Certificate Authority (CA) of the key management server, and
request that the CA issue a signed certificate. Use the signed certificate as the client certificate.
For more information about SafeNet KeySecure, see the SafeNet KeySecure k460 6.1.0
documentation. For more information about Thales keyAuthority, see the Thales keyAuthority
documentation.
Converting the client certificate to the PKCS#12 format
Convert the client certificate to the PKCS#12 format, which includes uploading the client certificate
in the PKCS#12 format to the 200 Storage Virtualization System (SVP).
1.
From an open command prompt, change the current directory to the folder where you want
to save the client certificate in the PKCS#12 format.
2. Move the private SSL key file (.key) and the client certificate to the folder in the current directory,
and run the command.
The following is an example for an output folder of c:\key, private key file (client.key),
and a client certificate file (client.crt:
C:\key>c:\openssl\bin\openssl pkcs12 -export -in client.crt -inkey
client.key -out client.p12
3. Upload the client certificate in the PKCS#12 format to the SVP and type the client certificate
password.
For more information about uploading the client certificate, see “Converting the client certificate
to the PKCS#12 format” (page 15) .
Uploading the root and client certificate
As part of configuring the connection settings to the key management server, you'll need to upload
the root certificate and the client certificate.
1.
On the menu bar, click Settings > Environmental Setting > View Key Management Server
Properties.
2. In the View Key Management Server Properties window, click Setup Key Management Server.
If you have not set the connection to the key management server, a message is displayed.
Click OK.
3. In the Setup Key Management Server window, upload the certificates.
Uploading the root and client certificate
As part of configuring the connection settings to the key management server, you'll need to upload
the root certificate and the client certificate.
Uploading the root and client certificate 15