HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide

4. Enter the new truststore password.
You can use the following characters:
A-Z a-z 0-9 spaces
The password is case sensitive. If you enter a character other than the above, you might render
your keystore unusable.
5. Enter the new password again.
6. Restart the P9000 Command View AE Suite product services for the changes to take effect.
If you will continue to specify other security settings by using HiKeytool, you do not have to restart
the services after each setting. Changes will become effective when you restart the services after
you have finished specifying all settings by using HiKeytool.
Related topics
• Truststores, page 180
Configuring an SSL server (Host Data Collector)
To use Host Data Collector as an SSL server, you need to prepare a key pair and server certificate.
Creating a key pair and a certificate signing request for Host Data Collector
To create a key pair and a self-signed certificate from the Host Data Collector machine, use the
hdc_ssltool command.
A certificate signing request and self-signed certificate are created with a private key size of 2,048
bits, the key algorithm RSA, and the signature algorithm SHA256withRSA.
Although you can use this command to create a self-signed certificate, HP recommends that you use
a self-signed certificate only to test encrypted communications.
Operations to complete in advance
• Log in as a user with Administrator permissions (for Windows) or as a root user (for Linux)
• Delete an existing keystore file of Host Data Collector (if you re-create the file)
Host Data Collector can create only one keystore file.
Format of the command
In Windows:
installation-folder-for-Host-Data-Collector\HDC\Base\bin\hdc_ssltool.bat
-key keystore-file-name -csr certificate-signing-request-file -keypass
private-key-password -storepass keystore-password [-cert self-signed-
certificate-file] [-validity number-of-valid-days] [-dname entity-dis-
tinguished-name]
In Linux:
installation-directory-for-Host-Data-Collector/HDC/Base/bin/
hdc_ssltool.sh -key keystore-file-name -csr certificate-signing-request-
file -keypass private-key-password -storepass keystore-password [-cert
self-signed-certificate-file] [-validity number-of-valid-days] [-dname
entity-distinguished-name]
Administrator Guide 207