HP Integrity Virtual Server Manager 6.0 User Guide

virtual partition with valid credentials, Virtual Server Manager displays I/O utilization data
for each virtual storage device and for VM aggregated storage interfaces.
• Virtual LAN (VLAN) interface name and status on the Network tab: This status is displayed for
a virtual partition with valid credentials, but invalid credentials will return an unknown LAN
status and utilization. It might display whatever information is available, for example, the bus,
dev, or the fcn number for the VLAN interface.
To change the WBEM credentials settings for virtual partitions, return to the Set WBEM Credentials
for Virtual Partitions page by selecting Modify→WBEM Credentials.... You do not need to select
a virtual partition before setting credentials.
IMPORTANT: After you enter the data, save it by clicking OK. Otherwise, the data is cleared
when the session ends.
Trusted certificates
If you require the additional security provided by certificate validation you can turn on SSL certificate
validation by selecting the Require trusted certificates check box on the Virtual Server Manager
Set WBEM Credentials for Virtual Partitions page. With this setting turned on, the client Certificate
Trust Store must include the server certificates from the virtual partitions; otherwise, Virtual Server
Manager cannot obtain certain information from the virtual partitions. If your environment does
not require the additional security provided by certificate validation, you can leave certificate
validation turned off.
To enable SSL certificate validation in Virtual Server Manager, you must export the server certificates
from the WBEM services providers on the virtual partitions, and import those certificates into the
keystore on the VSP where Virtual Server Manager is running. This keystore is shared between
Partition Manager and Virtual Server Manager. Certificates in this keystore are trusted by both
Partition Manager and Virtual Server Manager.
To get the certificate file from the WBEM services provider, follow these steps:
1. Locate the WBEM services provider certificate file (cert.pem) on the virtual partition to which
you want to connect. To find the correct file, open the WBEM services Provider configuration
file, which can be found in the following locations:
• For Windows:
%PEGASUS_HOME%\cimserver_current.conf
• For HP-UX:
$PEGASUS_HOME/cimserver_current.conf
(The default value for PEGASUS_HOME on HP-UX is /var/opt/wbem.)
The location of the server certificate file is configured by the sslCertificateFilePath
setting. If this value is not set in the configuration file, the default values are as follows:
• For Windows:
%PEGASUS_HOME%\server.pem
• For HP-UX:
/etc/opt/hp/sslshare/cert.pem
2. Copy the certificate file (cert.pem or server.pem) to the VSP where Virtual Server Manager
is running.
NOTE: Copy the certificate file to a temporary directory (not to the sslshare directory)
on the VSP. Do not overwrite the existing cert.pem or server.pem file in the sslshare
directory on the VSP.
Setting security credentials 15