HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide
If you use SHA256withRSA as the signature algorithm, server certificates signed with
SHA256withRSA must be supported by the Web browser used on the management client (GUI).
(see “About advanced security mode” on page 179, “Web browsers that do not support advanced
security mode” on page 180)
To create a key pair and a self-signed certificate for Device Manager server:
1. Execute the following to start HiKeytool.
In Windows:
installation-folder-for-the-Device-Manager-server\Server\
HiKeytool.bat
In Linux:
installation-directory-for-the-Device-Manager-server/Server/
HiKeytool.sh
2. In the main menu, enter 1 (SSL configuration for Device Manager Server).
3. In the server main menu, enter 1 (Make KeyPair/Self-Signed Certificate) .
4. Enter the host name.
Specify the host name used when connecting to the management server from the management
client. You can also specify the host name in FQDN format. If the management server is running
in a cluster environment, specify the logical host name.
Use the default value unless your computer is visible to the LAN or WAN under a different name,
in which case you should use the name by which the Device Manager server is visible.
5. Enter the organizational unit .
The default value is recommended, but you can use anything that is appropriate, for example,
Marketing.
6. Enter your organization name.
Ordinarily you would use the default value or your host name, but you can use another name,
such as the name of your company.
7. Enter your city or locality.
8. Enter your state or province.
Make sure that you spell it out instead of using an abbreviated code.
9. Enter your two-character country code .
10. Enter your key alias.
Make sure that you enter the same character string as the host name that you specified in step
4.
11. Enter the private key password (minimum of 6 characters ).
12. Enter the key algorithm.
Only RSA is supported.
13. Enter the key size.
Only 2048-bit keys are supported.
14. Enter the signature algorithm.
SHA256withRSA, SHA1withRSA and MD5withRSA are supported.
15. Enter the number of days for which the key pair and self-signed certificate are valid.
Security192