Neoview User Management and Security Administration Guide (R2.5)

Table 2-6 User Authentication Error and Warning Messages (continued)
Description and RecoveryError TextError or Warning Code
The password policy on the remote
directory server requires you to change
your password upon your first logon or
after having it reset, and you did not do
so.
This message applies only to remotely
authenticated database users. See your
LDAP administrator about changing your
password on the external server.
[ERROR 8837] CLI authentication : user :
username : need to change password on
initial logon or after reset
-8837
The security infrastructure could not
authenticate you as a user.
This message is not expected to appear
and could signify a software error. If this
condition persists, contact HP Support.
[ERROR 8837] CLI authentication : user :
username : could not authenticate
-8837
Obtaining and Installing Certificates
The current release of the Neoview security infrastructure gives you the option to use either a
self-signed certificate or a certificate signed by a Certificate Authority (CA) of your choice.
Generating and Installing a Self-Signed Certificate
During installation or upgrade of your Neoview platform, HP Support staff runs a post-installation
script to create a self-signed server certificate and generate a 2048-bit private key. The private
key is stored in a file accessible to ROLE.SECMGR.
The NCI CREATE CERTIFICATE command lets a user in the role ROLE.SECMGR replace the
self-signed server certificate. Alternatively, you can use the Self-Signed Certificate tab in HPDM.
Table 2-7 Self-Signed Certificate Attributes
CommentRangeInitial Value
Field Name
(HPDM)
Parameter Name
(NCI)
Specifies the unqualified
DNS name of the primary
segment
DNS nameNAImplicit: the
system to which
you are currently
connected
SYSTEM_NAME
Specifies the location to
which the new certificate
will be downloaded on
your workstation.
Pathname
SYSTEM_NAMEActive.cer
NACERT
Specifies the Subject
string to be inserted into
the certificate. In NCI,
you specify a text string
with commas separating
elements of the DN. In
HPDM, enter the value of
each element in the
corresponding field.
Distinguished
name
O=Hewlett-Packard Company,
OU=Self-Signed,
CN=SYSTEM_NAME
Common Name,
Organization,
Organizational
Unit,
City/Locality,
State/Province,
Country/Region
SUBJECT
Specifies the size of the
encryption key
1024 or 20482048Key Size (bits)KEYSIZE
For information about the HPDM Self-Signed Certificate tab and how to navigate to it, see the
HPDM Online Help.
56 Post-installation Security Setup Tasks