HP WBEM Services Version A.02.07, Release Notes, March 2008

HP WBEM Services Version A.02.07, Release Notes
Security
Chapter 118
Certificate Verification
CIM Clients
The CIM Client Interface supports the trust store and verification callback function as the
mechanisms for server certificate verification. The CIM Client applications can use one or
both of these mechanism to verify the server certificate.
wbemexec Client
The wbemexec command provides a command-line interface to a CIM server.
For more information about the wbemexec command, see the wbemexec man page.
wbemexec uses trust store for server certificate verification. Be sure to import the certificate
in /etc/opt/hp/sslshare/cert.pem from the system where the CIM Server is running to
the client system’s trust store.
For more information about certificates, see Importing Server Certificates into the Trust Store,
below.
wbemexec’s SSL connection to CIM Server will fail if the server certificate is not found and
verified in the trust store.
wbemexec is not recommended for use in high-threat environments because wbemexec does
not do any additional certificate verifications, such as host-name or certificate-depth
verification.