A.05.80 HP Insight Remote Support Advanced Operations Guide (October 2012)

Operations Guide
Appendix A: Insight Remote Support Advanced Troubleshooting Steps
3. Create a folder to save the exported certificates in.
4. Export the Server Certificate from HP SIM:
a. In HP SIM browse to Options → Security → HP Systems Insight Manager Server
Certificate and click Export.
b. Click Save on the File Download –Security Warning window that is displayed.
c. Save the certificate to the folder created earlier as <system-fqdn>.cer.
d. Record the Common Name field under Issued By. This is the name of the certificate that
you need to look for in the Trusted Certificates.
5. Export the Trusted Certificate(s) from HP SIM:
There could be from 0 to 3 trusted certificates in the HP SIM Trusted Certificates.
a. In HP SIM browse to Options → Security → Credentials → Trusted Systems and click the
Trusted Certificates tab. Look at the Issued To and Issued By fields in the HP SIM Trusted
Certificates.
b. Look for the certificate that issued the Server Certificate and export it as <certificate-
name>.cer.
c. Export the trusted certificate to the folder you created earlier.
d. Determine if the trusted certificate just exported was signed by another certificate
authority. If yes, export it also.
e. Repeat the procedure until you get to a certificate for which the Issued To and Issued By
columns contain the same certificate name.
Most often there is one Server Certificate and one Trusted Certificate.
6. Clear the old HP SIM certificate from the WEBES database with the following command:
desta cert –clear –alias <alias>
This will ensure that a new certificate is imported into WEBES.
7. Import the saved trusted certificate(s). The trusted certificate(s) must be imported before the
server certificate:
a. Open a command prompt and connect to the folder where the certificates were saved.
b. Execute command: desta cert –trustfile <trusted-certificate.cer>
Where <trusted-certificate.cer> is the file saved above.
8. Import the saved server certificate with the following command:
desta cert –trustfile <server-certificate.cer> -alias hpsim-<name
of certificate in fqdn format>.
9. Display a list of WEBES certificates with the command desta cert -list to view a list of
the certificates WEBES has stored. You should see the certificates that were just imported. If
they look correct, start DESTA. Communication with HP SIM should be established shortly.
HP Insight Remote Support Advanced (A.05.80)Page 44 of 53