A.05.80 HP Insight Remote Support Advanced Central Management Server Configuration Guide (October 2012)

Central Management Server Configuration Guide
Appendix B: Insight Remote Support Advanced Troubleshooting Steps
1. Stop DESTA_Service by entering the command: net stop desta_service
2. From a command prompt enter the command:
desta cert –trustfile <certificate-name.p7b> -alias hpsim-<hostname>
You should see a list of trusted certificates being added as a response.
3. Start DESTA_Service by entering the command: net start desta_service
4. Enter the command desta cert -list to view a list of the certificates WEBES has stored to
verify that the certificate was added.
Manually Importing HP SIM Certificates Into WEBES
1. Use the desta cert –list command to compare the WEBES certificates to the HP SIM Server
and Trusted certificates to see if there are missing certificates in DESTA. If yes, proceed with the
following steps.
2. Stop DESTA_Service by entering the command: net stop desta_service
3. Create a folder to save the exported certificates in.
4. Export the Server Certificate from HP SIM:
a. In HP SIM browse to Options → Security → HP Systems Insight Manager Server Certificate
and click Export.
b. Click Save on the File Download –Security Warning window that is displayed.
c. Save the certificate to the folder created earlier as <system-fqdn>.cer.
d. Record the Common Name field under Issued By. This is the name of the certificate that you
need to look for in the Trusted Certificates.
5. Export the Trusted Certificate(s) from HP SIM:
There could be from 0 to 3 trusted certificates in the HP SIM Trusted Certificates.
a. In HP SIM browse to Options → Security → Credentials → Trusted Systems and click the
Trusted Certificates tab. Look at the Issued To and Issued By fields in the HP SIM Trusted
Certificates.
b. Look for the certificate that issued the Server Certificate and export it as <certificate-
name>.cer.
c. Export the trusted certificate to the folder you created earlier.
d. Determine if the trusted certificate just exported was signed by another certificate authority. If
yes, export it also.
e. Repeat the procedure until you get to a certificate for which the Issued To and Issued By
columns contain the same certificate name.
Most often there is one Server Certificate and one Trusted Certificate.
6. Clear the old HP SIM certificate from the WEBES database with the following command:
desta cert –clear –alias <alias>
HP Insight Remote Support Advanced (A.05.80)Page 97 of 111