HP XP7 Replication Manager Configuration Guide (TK981-96012, May 2014)

• Creating a certificate signing request for Device Manager server
• Applying to a certificate authority for a Device Manager server certificate
• Importing a server certificate into the Device Manager server keystore
• Importing a server certificate into the Device Manager server truststore
• Downloading a Device Manager server truststore file
• Exporting a Device Manager server self-signed certificate
• Importing a server certificate into the truststore of HP XP7 CVAE
• Checking the server certificates imported into the truststore of HP XP7 CVAE
After importing the server certificate for the Device Manager server to the truststore (jssecacerts),
select HTTPS as the transmission protocol in the Replication Manager GUI window for adding (or the
window for editing) the information source, and specify the port number for HTTPS communications.
For more information on how to add or edit the information source, see the online Help.
NOTE:
If you want to restrict which cipher suites are used for SSL/TLS communication, change the value of
the server.https.enabledCipherSuites property in the server.properties file of the
Device Manager server. See the HP XP7 Command View Advanced Edition Administrator Guide for
more information.
Securing communications between Replication Manager and Business Continuity
Manager (IHS)
To encrypt communications between Replication Manager on the management server and BCM on
the host, you must set IHS as the reverse proxy server and import the IHS server certificate into the
truststore (jssecacerts) of Replication Manager.
Configuration Guide 107