HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide

-----BEGIN CERTIFICATE-----
MIIDMDCCApmgAwIBAgIDOBcYMA0GCSqGSIb3DQEBBAUAMIGHMQswCQYDVQQGEwJa
QTEiMCAGA1UECBMZRk9SIFRFU1RJTkcgUFVSUE9TRVMgT05MWTEdMBsGA1UEChMU
VGhhd3RlIENlcnRpZmljYXRpb24xFzAVBgNVBAsTDlRFU1QgVEVTVCBURVNUMRww
...
...
...
ADANBgkqhkiG9w0BAQQFAAOBgQBtzeFG4IfvpPnA7G/khD4rrT1TvjbK4Y1pcROM
cel43uUfKgNYgY35UukoNtd120XOoudLwKvJu5JK7846zWIbEJmCr5BYlmywZuao
MQdXMyPOUnqucgg44/JG2F27xqP4atWEZsNlj5R7XGGXi4RPAO5Y0YbbbvMJD0QR
yV0Oxw==
-----END CERTIFICATE-----
Importing a server certificate into the Device Manager server keystore
To import a server certificate issued by a certificate authority into the Device Manager server keystore,
from the HiKeytool main menu, select SSL configuration for Device Manager Server, and then Import
Digitally Signed Certificate.
Operations to complete in advance
• Log in as a user with Administrator permissions (for Windows) or as a root user (for Linux)
• Delete the existing key pair
A keystore can contain only one key pair. A keystore containing two or more key pairs may cause
a problem when the Device Manager server is running in secure mode.
• Obtain a server certificate for the Device Manager server
• Import server certificates issued by certificate authorities
Import the certificates for all certificate authorities including the certificate authority that issued the
server certificate, intermediate certificate authorities, and the root certificate authority into the
Device Manager server truststore.
To import a server certificate into the Device Manager server keystore:
1. Start HiKeytool, and then in the main menu, enter 1 (SSL configuration for Device Manager Server).
2. In the server main menu, enter 4 (Import Digitally Signed Certificate).
3. Specify the absolute path to the location to which the server certificate will be saved.
4. Restart the P9000 Command View AE Suite product services for the changes to take effect.
If you will continue to specify other security settings by using HiKeytool, you do not have to restart
the services after each setting. Changes will become effective when you restart the services after
you have finished specifying all settings by using HiKeytool.
The server certificate is imported into the keystore file in the Device Manager server (default:
keystore).
In Windows:
installation-folder-for-the-Device-Manager-server\Server\keystore
In Linux:
installation-directory-for-the-Device-Manager-server/Server/keystore
Security198