HP StorageWorks XP Performance Advisor Software v4.6 Install Guide (T1789-96096, July 2010)

is that it does not need a Certificate Authority (CA) signed certificate. The client takes the public key
from the server and stores it in a keystore, and then places the keystore in the JRE’s trusted site list.
This enables the XP Performance Advisor host agent to establish a SSL connection to secure the data
transfer.
To enable SSL on a XP Performance Advisor host agent:
1. Navigate to the bin folder in the JRE location defined by your JAVA_HOME variable.
2. Generate keystore on the Tomcat server:
<%JAVA_HOME%>\bin>keytool -genkey -alias tomcat -keyalg RSA -keystore
<%HPSS_HOME>\hpss\pa\tomcat\conf\keystore
3. When prompted, provide the password as changeit.
4. When prompted for the first name and last name, enter the fully-qualified domain name of your
management station. For example, abc.domain.company.com.
5. For the rest of the fields, enter appropriate values in the order mentioned: Division, Company
(your company name), City, State, and Country.
NOTE:
The Country field can accept only two characters.
6. Enable https for your XP Performance Advisor management station by editing the server.xml
file in the <PA_Install folder>\HPSS\pa\tomcat\conf folder:
<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
keystoreFile="${catalina.home}/conf/keystore"
keystorePass="changeit" clientAuth="false"
sslProtocol="TLS" />
Comment out the following lines in the server.xml file, as shown below:
<!---
<Connector port="80" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="443" />
--->
The keystore location is provided by the Tomcat server.
7. Start the Tomcat server in the SSL mode:
https://[server name].[domain name]/pa or https://[IP address]/pa
8. On the XP Performance Advisor host agent, download the InstallCert program from the
following location: http://blogs.sun.com/andreas/resource/InstallCert.java .
NOTE:
JavaC is required to compile the InstallCert program on the host agent server. When you
compile the program, ensure that it is named as InstallCert.
Understanding the XP Performance Advisor installation prerequisites40