HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide

Operations to complete in advance
Create a certificate signing request for the Device Manager server.
Information to collect in advance
• How to apply to a certificate authority and the support status
You need to have a server certificate issued in X.509 DER or X.509 PEM format. For details about
how to apply for a certificate, check the website of the certificate authority you will use.
In addition, if you enable communication in advanced security mode, make sure that the certificate
authority you will use supports signatures using SHA256withRSA.
(see “About advanced security mode” on page 179, “Web browsers that do not support advanced
security mode” on page 180)
To apply to a certificate authority for a Device Manager server certificate:
• Send the created certificate signing request to a certificate authority.
Usually, server certificates issued by a certificate authority are sent via email. HP recommends that
you save the server certificate as a file named host-name.cer in the following location.
In Windows:
installation-folder-for-the-Device-Manager-server\Server
In Linux:
installation-directory-for-the-Device-Manager-server/Server
Some certificate authorities might return a server certificate as an attached file with a .cer extension.
In addition, if a certificate authority returns the response as text in the body of an email, use a text
editor to save the response in a new file.
NOTE:
• Make sure that you save the response from a certificate authority.
• Certificates issued by a certificate authority have an expiration date. You need to have a certificate
reissued before your certificate expires.
• The number of valid days specified in a server certificate by a certificate authority will override
the value specified by using HiKeytool. If the key pair and associated server certificate expire, it
will be impossible to establish a secure connection via SSL/TLS.
Write down the expiration date by which you need to renew your server certificate.
The following shows an example of a server certificate issued by a certificate authority.
Administrator Guide 197