HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide

Enabling SSL/TLS for the Device Manager server
To enable SSL/TLS for the Device Manager server, from the HiKeytool main menu, select SSL
configuration for Device Manager Server, and then Set Device Manager Server Security Level.
Operations to complete in advance
Log in as a user with Administrator permissions (for Windows) or as a root user (for Linux).
Create a self-signed certificate and key pair for the Device Manager server.
To enable SSL/TLS for the Device Manager server:
1. Start HiKeytool, and then in the main menu, enter 1 (SSL configuration for Device Manager Server).
2. In the server main menu, enter 2 (Set Device Manager Server Security Level).
3. Enter 2 (TLS/SSL).
4. Restart the P9000 Command View AE Suite product services for the changes to take effect.
If you will continue to specify other security settings by using HiKeytool, you do not have to restart
the services after each setting. Changes will become effective when you restart the services after
you have finished specifying all settings by using HiKeytool.
NOTE:
The following setting is used also for communication between vCenter Server and the management
server. If Plug-in for Virtualization Server Provisioning is being used, you must change this setting for
Plug-in for Virtualization Server Provisioning as well.
>2
Current Device Manager Server Security Level = User Logon (Basic
Authentication)
Options:
1) User Logon (Basic Authentication)
2) TLS/SSL (Secure Sockets)
Enter selection: [default=1]:2
Device Manager Server Security level set to: TLS/SSL Secure Socket
You must restart the Device Manager Server for this change to take
effect.
Related topics
HP P9000 Command View Advanced Edition Suite Software Plug-in for Virtualization Server Pro-
visioning User Guide
Creating a certificate signing request for Device Manager server
To create a certificate signing request (CSR) in the Device Manager server, from the HiKeytool main
menu, select SSL configuration for Device Manager Server, and then Generate CSR.
Administrator Guide 195