HP Secure Key Manager - Manual (Page 150)

Certificate and CA Configuration Page
Certificates identify one entity to another. In this case, when making SSL connections between a client
application and the KMS Server, the server must provide its server certificate to the client application.
Likewise, if you require client applications to validate themselves to the KMS Server via client certificates,
then the client application must provide its client certificate to the server during the SSL handshake.
The KMS uses the following two kinds of certificates:
• Server certificates on the SKM allow an SKM to authenticate itself to a client application during
an SSL handshake.
• Client certificates allow client applications to authenticate themselves to the SKM during an SSL
handshake. Where the certificate resides varies from application to application and database to
database.
For more information on creating a local CA, refer to Create Local CA .
The Certificate and CA Configuration page enables you to view existing certificates and certificate
requests, create certificate requests, and import certificates. This page contains the following sections:
• Certificate List
• Certificate Information
• Certificate Installation
• Self Signed Certificate
• Create Certificate Request
• Using the Import Certificate screen
Certificate List
The Certificate List displays the list of certificates and certificate requests on the SKM. Use the Certificate
List section of the Certificate Configuration page to view all certificates on the SKM.
Figure 76 Viewing the Certificate List section
The following table describes the components of the Certificate List section.
Table 57 Certificate List section components
Description Component
The name of the certificate; this name is used internally by the SKM. Click the certificate
name to view properties and access the certificate information.
Certificate Name
Using the Management Console 150