HP StorageWorks Command View XP Advanced Edition Device Manager Server Installation and Configuration Guide (December 2005)

Command View XP AE Device Manager Server Security 87
2. HiKeytool will inform the user where the Certificate Signing Request has been stored on disk
(see
Figure 6-5), which will be in a file named <host name>.csr inside the <Device Manager
server> directory. The contents of your CSR will look similar to the example in
Figure 6-6.
IMPORTANT: Your CSR will contain extra carriage returns and line feeds which must be included when it is
sent to the Certificate Authority, or it will not be processed correctly.
3. You will then send the CSR to the Certificate Authority of your choice to be digitally signed. The
application for digital signing can be done online, and the response is typically returned to you
via email from the Certificate Authority.
4. If you intend to have a self-signed certificate digitally signed by a Certificate Authority, you may
want to check their web site for specifics. If your Certificate Authority’s requirements are
sufficiently different, you may want to recreate the Device Manager server keypair before
generating a CSR. To recreate the keypair, first delete the existing keypair (see
6-2-10 for
instructions), and then create a new keypair as described in this section.
NOTE: There must be only one entry in the Device Manager server keystore, or you could have problems
when you are running the Device Manager server in secure mode.
Figure 6-5 Completed CSR
-----BEGIN NEW CERTIFICATE REQUEST-----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