A.05.70 HP Insight Remote Support Advanced Central Management Server Configuration Guide (October 2011, 5900-1725)

Central Management Server Configuration Guide
Appendix B: Insight Remote Support Advanced Troubleshooting Steps
columns contain the same certificate name.
Most often there is one Server Certificate and one Trusted Certificate.
6. Clear the old HP SIM certificate from the WEBES database with the following command:
desta cert –clear –alias <alias>
This will make sure that a new certificate is imported into WEBES.
7. Import the saved trusted certificate(s). The trusted certificate(s) must be imported before the server
certificate:
a. Open a command prompt and connect to the folder where the certificates were saved.
b. Execute command: desta cert –trustfile <trusted-certificate.cer>
Where <trusted-certificate.cer> is the file saved above.
8. Import the saved server certificate with the following command:
desta cert –trustfile <server-certificate.cer> -alias hpsim-<name of
certificate in fqdn format>.
9. Display a list of WEBES certificates with the command desta cert -list to view a list of the
certificates WEBES has stored. You should see the certificates that were just imported. If they look
correct, start DESTA. Communication with HP SIM should be established shortly.
If the Server Certificate is Not the Default and There
Are No Trusted Certificates
The situation may occur where the server certificate was modified but there are no certificates in the HP
SIM trusted certificates.
Server Certificate is a Self-Signed Certificate
In one case the Server Certificate is self-signed. The certificate is issued by itself and is not contained in
the output of desta cert –list.
To resolve this issue, export the certificate from the HP SIM Server Certificates display and export it into
DESTA.
Server Certificate is Issued By a Certificate Not in HP SIM
Trusted Certificates
Sometimes the server certificate is issued by another certificate but that certificate is not in the HP SIM
Trusted Certificates. When this occurs you need to look for the certificate in Internet Explorer, export it,
and import in to WEBES prior to importing the HP SIM server certificate.
1. The HP SIM server certificate indicates it is trusted by a certificate, for example: ABC
Certificate Authority.
2. In an IE window navigate to Tools → Internet Options → Content → Certificates → Intermediate
HP Insight Remote Support Advanced (A.05.70)Page 97 of 110