HP Systems Insight Manager 7.2 Technical Reference Guide

IMPORTANT: Replacing the SSL server certificate and private key invalidates the existing HP SIM
server certificate and the local HP SMH certificate wherever they might be imported, such as
browsers and the Trusted Management Servers List in other HP SMHs. Replace the previous server
certificate with the new server certificate in accordance with your security practices to return to the
same level of functionality you had before.
NOTE: On Windows and Linux, this process also affects the local HP System Management
Homepage certificate and private key on HP-UX systems, it affects the WBEM Services certificate
and private key.
NOTE: Valid characters for each of these fields include letters a through z (lowercase), A through
Z (uppercase), numbers 0 through 9, and the following special characters: " ( ) + , - . / : ?
space _ and ~. Each field must contain at least one non-white space character.
Procedure 91 Creating new system certificates
1. (Optional) Change the following fields:
Table 32 Server certificates fields
DescriptionField
The Common Name (CN) field holds the parameter that
the browser uses for name comparison when browsing
to the CMS. This field can be updated with other name
formats, such as fully qualified names, and can contain
up to 255 characters.
Common Name (CN)
Enter multiple system names separated by a comma. If
a name identical to the CN is specified in the Alternative
Names field, it is not duplicated in the certificate.
Alternative names are case-sensitive. Therefore, if a
duplicate case-sensitive name is entered, it is not
duplicated in the certificate. For example, if SYS1, sys1,
and SYS1 are entered, SYS1 is only listed once in the
certificate. The alternative names might appear in a
different order from the order you enter them. However,
this does not affect their usage.
(Optional) Alternative Names
Enter the name of your organization. This field can
contain up to 64 characters.
Organization (O)
Enter the name of your department. This field can
contain up to 64 characters.
Organizational Unit (OU)
Enter the name of your city. This field can contain up to
128 characters.
Locality (L)
Enter the name of your state. This field can contain up
to 128 characters.
State (S)
Enter the name of your country. This field can contain
up to two alphanumeric characters, using the two-letter
country codes.
Country (C)
2. Click OK. If you click Cancel, you return to the Server Certificate page without creating a new
server certificate. A warning appears, reminding you about the effects of changing the
certificate and private key. If you click OK in the warning box to continue, a new 2,048-bit
key-pair and a new self-signed certificate are generated. The old key-pair and certificate are
not retrievable unless a backup was created manually before this process. The new certificate
and private key take effect the next time HP SIM is restarted.
Security 241