HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide

The following table lists and describes the attribute types and values specified for the DN.
Table 50 Attribute types and values specified for the DN
Attribute valueFull name of attribute typeAttribute type
Specify the host name of the management server
(HBase Storage Mgmt Web Service). This attribute
is required.
Specify the host name used when connecting to
the management server (HBase Storage Mgmt
Web Service of Common Component) from the
management client (GUI). You can also specify the
host name in FQDN format. If the management
server is running in a cluster environment, specify
the logical host name.
Common NameCN
Specify the name of the organizational unit.Organizational Unit NameOU
Specify the organizational name. This attribute is
required.
Organization NameO
Specify the name of the city, town, or other local-
ity.
Locality NameL
Specify the name of the state or province.State or Province NameST
Specify the two-letter country code.Country NameC
sigalg
Specify a signature algorithm. You can specify SHA256withRSA, SHA1withRSA, or
MD5withRSA. If you omit this specification, SHA256withRSA is used as the signature algorithm.
CAUTION:
When you execute the hcmdsssltool command, if a file with the same name already exists in the
output location, the existing file will be overwritten. Therefore, when you recreate a private key,
certificate signing request, or self-signed certificate, HP recommends you to output them to a directory
other than existing storage directories.
Applying to a certificate authority for a Common Component server certificate
Usually, you can apply to a certificate authority for a server certificate online. Send the Common
Component certificate signing request (CSR) that you created to a certificate authority to be digitally
signed.
Operations to complete in advance
Create a certificate signing request for Common Component.
Information to collect in advance
• How to apply to the certificate authority and what they support
You need to have a server certificate issued in X.509 PEM format. For details about how to apply
for a certificate, check the website of the certificate authority you will use.
In addition, make sure that the certificate authority supports the signature algorithm.
Security184