HP StorageWorks Command View XP Advanced Edition Device Manager Server Installation and Configuration Guide (December 2005)

Command View XP AE Device Manager Server Security 105
6-3-4-2 Disabling SSL
To disable SSL, comment out the directives for the SSL port and logical host in the httpsd.conf
file. Figure 6-30 is an example of disabling SSL in Windows
®
.
NOTE: The line that begins with a pound sign (#) is a comment line.
–Listen 23015
–SSLDisable
–
–#Listen 23016
–#<VirtualHost www.example.com:23016>
–# ServerName www.example.com
–# SSLEnable
–# SSLRequireSSL
–# SSLCertificateFile "c:/Program Files/CVXPAE/Base/httpsd/conf/ssl/server/httpsd.pem"
–# SSLCertificateKeyFile "c:/Program
Files/CVXPAE/Base/httpsd/conf/ssl/server/httpsdkey.pem"
–# SSLCACertificateFile "c:/Program
Files/CVXPAE/Base/httpsd/conf/ssl/server/anycert.pem"
–# SSLSessionCacheTimeout 3600
–#</VirtualHost>
Figure 6-30 Disabling SSL (Windows
®
)
6-3-4-3 Changing a Port Assigned to SSL
The default port of SSL for Common Web Service is 23016. To change the port, change the Listen
directive and the port number of the logical host in the httpsd.conf file.
6-3-5 Setting SSL
When you set SSL, you will need to specify a logical host name for the cluster manager IP address.
That IP address must be enabled and accessible. If that IP address was specified during Device
Manager installation, execute the following command:
• c:\Program Files\CVXPAE\Base\bin\hcmdschgurl -change http://<cluster
manager IP address>:port number http://<host name for the cluster
manager IP address>:port number
6-3-5-1 Security Settings for Command View XP AE Device Manager Server
If you are creating a keypair by using HiKeytool, you must specify a logical host name for the cluster
manager IP address when you specify the server name. Refer to section
6-2-1 for specific
instructions.
6-3-5-2 SSL Settings for Command View XP AE Suite Common Web Service
When creating a Certificate Signing Request (CSR):
• Specify an IP address for cluster management and a logical host name in Common Name (e.g.,
YOUR name). That IP address must be enabled and accessible.
• If you are editing the httpsd.conf file, you must specify the cluster manager IP address in
VirtualHost and specify a logical host name in ServerName.
Figure 6-31 shows the editing format for the httpsd.conf file.