HP 3PAR OS 3.1.3 CLI Administrator's Manual

Using the -certfile Option
To specify the certificate file use the -certfile global option followed by the name of the
certificate file, see the following example. Substitute your certificate file name for <certfile1>.
The -certfile option will override the -certdir option.
$ cli -certfile <certfile1>
Saving a Certificate File to a Directory
To save a certificate exception file to a directory where the CLI server will look for certificate
information. When the CLI server certificate is not verified by the certificate file, then the CLI looks
for this information in the certificate exception file.
• The -certdir global option.
• The TPDCERTDIR environment variable.
Setting the TPDCERTDIR Environment Variable on Solaris, Linux, HP-UX, and AIX
To set the TPDCERTDIR environment variable on Solaris, Linux, HP-UX, or AIX, see the following
system output example. Substitute the name of your certificate file name for certdir1 and use
the correct syntax for your shell.
$ TPDCERTDIR=certdir1
$ export TPDCERTDIR
$ cli
Setting the TPDCERTDIR Environment on Windows
To set the TPDCERTDIR environment variable in Windows:
1. Perform Step 1 through Step 4 of the procedure for setting the TPDSOCKSSL environment
variable in Windows as described in “Using SSL” (page 47).
2. In the Environment Variable dialog box, enter TPDCERTDIR in the Variable box.
3. Enter the directory where the certificate file will be savedValue box.
4. Click OK.
Using the -certdir Option
To specify the directory in which the certificate file and the exception file are located use the
-certdir global option followed by the name of the directory See the following example. Substitute
your certificate directory name for <certdir1>.
$ cli -certdir <certdir1>
Checking the Host Name to Validate the Certificate
The Common Name (CN) attribute of the subject of the CLI server certificate can be checked against
the host name of the HP 3PAR Storage System CLI client is connecting to. CLI client prompts user
when the host name does not match the CN attribute of the subject of the CLI server certificate.
• The -certhostcheck global option.
• The TPDCERTHOSTCHECK environment variable.
52 Running the HP 3PAR Command Line Interface