HP Servicecontrol Manager 3.0 Troubleshooting Guide

Servicecontrol Manager Issues
SCM Generates A Certificate Error
Chapter 3
36
SCM Generates A Certificate Error
Symptom The Tomcat certificate for SCM is by default issued for three months. After three
months, you will receive a message that says the certificate has expired.
Fix On the CMS, replace the certificate using the keytool command and set the validity of
the new certificate for your environment.
Step 1. Retrieve the hostname:
hostname=$(/opt/mx/bin/mxgethostname)
Step 2. Retrieve the MxKeystorePassword:
passwd=$(/opt/mx/bin/mxpassword -l -x MxKeystorePassword)
Step 3. Delete the old certificate:
/opt/mx/j2re/bin/keytool -delete -alias tomcat -keystore
/etc/opt/mx/config/security/certificates -keypass ${passwd} -storepass
${passwd}
Step 4. Add the new certificate:
/opt/mx/j2re/bin/keytool -genkey -alias tomcat -keystore
/etc/opt/mx/config/security/certificates -keyalg RSA -dname
"CN=${hostname},OU=Sysmgmt,O=HP,L=Cupertino,ST=California,C=US"
-validity
days -keypass ${passwd} -storepass ${passwd}
where
days is the number of days the certificate is valid.