HP XP7 Replication Manager Configuration Guide (TK981-96012, May 2014)

Figure 15 Flow of operations for setting up secure communications between Replication Manager and
the Device Manager server
If you use a well-known certificate authority (CA), its server certificate might already be in the truststore
(jssecacerts). In this case, you do not need to import the CA’s server certificate again.
NOTE:
Regarding server certificates:
• If you manage multiple Device Manager servers as information sources, you must create server
certificates for each server and import them into the truststore (jssecacerts) for the management
server running Replication Manager.
• A secure method must be used to transmit the server certificate for the remote Device Manager to
the management server running Replication Manager.
For more information on the procedures for the Device Manager server and Common Component,
and information on the truststore, see the following descriptions in the HP XP7 Command View
Advanced Edition Administrator Guide:
• Creating a key pair and a self-signed certificate for Device Manager server
• Enabling SSL/TLS for the Device Manager server
Security management106