HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide

To import a server certificate into the truststore:
1. Execute the following command.
In Windows:
installation-folder-for-Common-Component\bin\hcmdskeytool -import
-alias alias -file certificate-file-name -keystore truststore-file-
name -storepass password-to-access-the-truststore
In Linux:
installation-directory-for-Common-Component/jdk/bin/keytool -import
-alias alias -file certificate-file-name -keystore truststore-file-
name -storepass password-to-access-the-truststore
alias: Specify the name used to identify the certificate in the truststore.
If there are two or more server certificates, specify an alias name which is not used in the
truststore.
file: Specify the certificate file.
keystore: Specify the truststore file path of the import destination. If no truststore file exists,
one will be automatically created.
HP recommends that you import LDAP directory server certificates into ldapcacerts. If you
want to share a certificate with other programs, you can import the certificate into
jssecacerts.
Import a server certificate for communication between the Replication Manager server and
the Device Manage server into jssecacerts.
Import a server certificate used for communication between Host Data Collector and the Device
Manager server into dvmcacerts.
storepass: Specify the password used to access the truststore.
NOTE:
Note the following when you use the hcmdskeytool or keytool utility to specify a
unique name in the truststore, the truststore file name, and the password:
Do not use the following symbols in the file name:
: , ; * ? " < > |
Specify the file name as a character string of no more than 255 bytes.
Do not include double quotation marks (") in the unique name in the truststore or the
password.
2. Restart the services of P9000 Command View AE Suite product.
Related topics
Starting services, page 317
Stopping services, page 318
Conditions for an LDAP directory server certificate
To use StartTLS to communicate between the management server and an LDAP directory server, check
that the obtained LDAP directory server certificate satisfies the following requirement:
Security218