HP XP P9000 Command View Advanced Edition Suite Software 7.6.1-00 Administrator Guide

Operation workflow for secure communication between a management server and a CIM
client (two-way authentication for object operations) ....................................................... 176
Operation workflow for secure communication between a management server and a CIM
client (event indications) .............................................................................................. 177
Operation workflow for secure communication between a management server and a CIM
client (two-way authentication for event indications) ........................................................ 178
About advanced security mode ................................................................................... 179
Web browsers that do not support advanced security mode ............................................ 180
Truststores ................................................................................................................. 180
Configuring an SSL server (Common Component) ................................................................. 182
Creating a secret key and a certificate signing request for Common Component ............... 182
Applying to a certificate authority for a Common Component server certificate .................. 184
Enabling SSL/TLS for Common Component ................................................................... 185
Examples of configuring an httpsd.conf file (Enabling SSL/TLS for Common Component) ..... 187
Closing the port for the non-SSL communication (HBase Storage Mgmt Web Service) ......... 188
Disabling SSL/TLS for Common Component .................................................................. 189
Examples of configuring an httpsd.conf file (Disabling SSL/TLS for Common Component) .... 190
Configuring an SSL server (Device Manager server) .............................................................. 191
Creating a key pair and a self-signed certificate for Device Manager server ...................... 191
Enabling SSL/TLS for the Device Manager server ........................................................... 195
Creating a certificate signing request for Device Manager server ..................................... 195
Applying to a certificate authority for a Device Manager server certificate ......................... 196
Importing a server certificate into the Device Manager server keystore .............................. 198
Viewing the Device Manager server key pair information in normal mode ......................... 199
Viewing the Device Manager server key pair information in verbose mode ........................ 200
Deleting a key pair from the Device Manager server keystore .......................................... 200
Changing the password of a Device Manager server key pair ......................................... 201
Changing the password of the Device Manager server keystore ....................................... 202
Importing a server certificate into the Device Manager server truststore ............................. 202
Viewing the Device Manager server truststore information in normal mode ........................ 203
Viewing the Device Manager server truststore information in verbose mode ....................... 204
Deleting a server certificate from the Device Manager server truststore .............................. 205
Changing the password of the Device Manager server truststore ...................................... 206
Configuring an SSL server (Host Data Collector) ................................................................... 207
Creating a key pair and a certificate signing request for Host Data Collector .................... 207
Applying to a certificate authority for a Host Data Collector server certificate ..................... 208
Importing the Host Data Collector server certificates into the keystore ................................ 209
Configuring an SSL client .................................................................................................. 210
Downloading a Device Manager server truststore file ...................................................... 210
Exporting a Device Manager server self-signed certificate ............................................... 211
Importing a server certificate into a Web browser .......................................................... 211
Changing pop-up blocker settings ................................................................................ 212
Enabling SSL/TLS for the Device Manager CLI computer ................................................. 213
Downloading the Tiered Storage Manager server truststore files ....................................... 214
Enabling SSL/TLS for the Tiered Storage Manager CLI computer ...................................... 215
Importing a server certificate into the truststore ............................................................... 216
Conditions for an LDAP directory server certificate .......................................................... 218
Checking the server certificates imported into the truststore .............................................. 219
Changing the communication protocol between the Replication Manager server and the
Device Manager server .............................................................................................. 219
Changing virtualization server information .................................................................... 220
Refreshing a storage system ......................................................................................... 220
Changing storage system information ........................................................................... 221
Configuring an SSL server and clients (CIM server) ............................................................... 221
Creating a keystore file for object operations ................................................................. 222
8