HP VAN SDN Controller Administrator Guide v3

8. If you are operating a team of controllers in your environment, turn off self-signing for
inter-controller communication:
Under /opt/sdn/virgo/repository/usr, change the "selfsigned" value to false for the following
component:
com.hp.sdn.misc.ServiceRestComponent.properties
9. If you set up a different password than the default "skyline" password for your keystore, you
will need to edit /opt/sdn/virgo/configuration/tomcat-server.xml and change the keystorePass
value in the <Connector port="8443"…> tag to the new keystore password.
10. Start the controller. Continue to the next section if you are using a different keystore and
truststore password than the default "skyline" password.
4.4 SDN Controller Keystore and Truststore Locations and Passwords
The SDN Controller keystore and truststore are referenced by several components, and thus need
to be updated for these components:
• com.hp.sdn.api.impl.AlertPostManager
• com.hp.sdn.misc.AdminRestComponent
• com.hp.sdn.misc.ServiceRestComponent
The parameters for these components can be accessed by logging into your UI at
https://<controller_ips>:8443/sdn/ui. In the left pane:
1. Select Configurations.
2. Select one of the three components listed above.
3. Select Modify.
4. Repeat for the other two components.
Figure 70 Components that reference controller keystore and truststore
The values for keystore and keystore.password contain the keystore location and encrypted keystore
password respectively. The values for truststore and truststore.password contain the truststore
location and encrypted truststore password respectively.
4.4 SDN Controller Keystore and Truststore Locations and Passwords 67