HP Serviceguard Toolkit for Integrity Virtual Servers User Guide

certificate distributed to the client; client public certificate distributed to the server). The default
locations for the generated key files are:
• For VM Hosts: /etc
• For VM guests:
HP-UX/Linux: /opt/hp/cmappserver◦
◦ Windows: C:\Program Files\Hewlett-Packard\cmappserver
Key generation on the VM Host
The following three commands must be executed on one VM Host to generate the
client.private, client.public and temp.key security keys by using the keytool
program.
For more information on these commands, see http://java.sun.com/j2se/1.4.2/docs/tooldocs/
solaris/keytool.html.
These commands create default key names and locations to successfully configure application
monitoring.
HP Serviceguard commands control the startup and shutdown of the packaged VM guest.
NOTE: Create and set the current directory (that is, HP-UX cd command) to
/etc/cmcluster/cmappmgr before executing these commands.
a. keytool -genkey -alias clientprivate -keystore client.private
-storepass clientpw -keypass clientpw -validity 400
WARNING! On Linux systems, you might face problems while generating keys and
using the “gcj” version of Java, such as “jre-1.4.2-gcj”. If this problem occurs, you must
use another version of Java™ and the associated keytool.
NOTE:
• This command prompts for a user name, organization, and physical location
information to document the use of the key.
• The —validity parameter is used to specify the number of days a key is valid.
This does not affect private keys but is still a required parameter.
b. keytool -export -alias clientprivate -keystore client.private
-file temp.key -storepass clientpw
c. keytool -import -noprompt -alias clientpublic -keystore
client.public -file temp.key -storepass public
Key generation on the VM guest
The following three commands must be executed on each VM guest to generate the
server.private, server.public and temp.key security keys. Set the current directory
to /opt/hp/cmappserver on HP-UX/Linux guests or C:\Program Files\
Hewlett-Packard\cmappserver on Windows guests before running these commands.
a. keytool -genkey -alias serverprivate -keystore server.private
-storepass serverpw -keypass serverpw -validity 400
18 Configuring guest application monitoring service