HP 3PAR OS 3.1.3 CLI Administrator's Manual

Finally, use the createuser -e command to enter the encrypted password.
$ createuser –e user1 testdomain edit
User created
Validating CLI Server Certificate
When connecting with SSL, the CLI client attempts to validate the CLI server certificate using the
certificate file. If the CLI client is not validated with the certificate file, then it will attempt the
validation with the exception file.
The certificate file contains the certificate that validates the CLI server certificate. This file is created
by user and must be in Privacy Enhanced Mail (PEM) format. User can retrieve the self-signed CLI
server certificate using the showcert command with the –pem option and save it in the certificate
file. The exception file contains the information that is necessary to validate the CLI server certificate.
This file is created by CLI client.
The default certificate file and exception file are $HOME/.hp3par/cert and $HOME/.hp3par/excp
on Solaris, Linux, HP-UX and AIX, and %USERPROFILE%\.hp3par\cert and
%USERPROFILE\.hp3par\excp on Windows. These defaults values can be overridden by the
command line options or by the environment variables described.
The –certdir global option and the TPDCERTDIR environment variable can be used to specify the
directory (“<certdir>”) in which the certificate and the exception files are located. The default value
is $HOME/.hp3par on Solaris, Linux, HP-UX, and AIX, and %USERPROFILE%\.hp3par on Windows.
CLI client assumes <certdir>/cert and <certdir>/excp as the certificate file and the exception file,
respectively (<certdir>\cert and <certdir>\excp on Windows).
the –certfile global option and the TPDCERTFILE environment variable can be used to specify
the certificate file independently of where the exception file is located. Use of the –certfile
global option or the TPDCERFILE environment variable is useful when the same certificate file is
shared among multiple users.
• The -certdir global option.
• The TPDCERTDIR environment variable.
• The -certfile global option.
• The TPDCERFILE environment variable.
Setting the TPDCERTFILE Environment Variable on Solaris, Linux, HP-UX, and AIX
To set the TPDCERTFILE environment variable on Solaris, Linux, HP-UX, or AIX, see the following
system output example. Substitute the name of your certificate file name for certfile1 and use
the correct syntax for your shell. The TPDCERTFILE variable will override the TPDCERTDIR variable.
$ TPDCERTFILE=certfile1
$ export TPDCERTFILE
$ cli
Setting the TPDCERTFILE Environment Variable on Windows
To set the TPDCERTFILE environment variable in Windows. The TPDCERTFILE variable will override
the TPDCERTDIR variable:
1. Perform Step 1 through Step 4 of the procedure for setting the TPDSOCKSSL environment
variable in Windows as described in “Using SSL” (page 47).
2. In the Environment Variable dialog box, enter TPDCERTFILE in the Variable box.
3. Enter the certificate file name in the Value box.
4. Click OK.
Global Options and Environment Variables 51