HP StorageWorks P9000 Performance Advisor Software v5.4 Install Guide (T1789-96330, April 2012)

5 Configuring SSL settings for P9000
Performance Advisor
You can configure SSL settings for P9000 Performance Advisor using the unsigned or the signed
approach.
Unsigned approach
You can generate unsigned SSL certificates on the server and add them to the JRE's trusted list of
certificates to enable SSL on a P9000 Performance Advisor. The advantage with this method is that
it does not need a Certificate Authority (CA) signed certificate. The client takes the public key from
the server and stores it in a keystore, and then places the keystore in the JREs trusted site list. This
enables the P9000 Performance Advisor to establish a SSL connection to secure the data transfer.
Management Station
To configure SSL settings in your management station perform the following steps:
1. Navigate to the bin folder in the JRE location defined by your JAVA_HOME variable.
2. Generate keystore on the Tomcat server:
<%JAVA_HOME%>\bin>keytool -genkey -alias tomcat -keyalg RSA -keystore
<%HPSS_HOME>\hpss\pa\tomcat\conf\keystore
The default location for JRE in management station is listed below:
%HPSS_HOME%\jre\bin
3. When prompted, provide the password as changeit.
4. When prompted for the first name and last name, enter the fully-qualified domain name of your
management station. For example, abc.domain.company.com.
5. For the rest of the fields, enter appropriate values in the order mentioned: Division, Company
(your company name), City, State, and Country.
NOTE:
The Country field can accept only two characters.
6. Enable https for your P9000 Performance Advisor management station by editing the serv-
er.xml file in the <PA_Install folder>\HPSS\pa\tomcat\conf folder:
<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
keystoreFile="${catalina.home}/conf/keystore"
keystorePass="changeit" clientAuth="false"
sslProtocol="TLS" />
Comment out the following lines in the server.xml file, as shown below:
HP StorageWorks P9000 Performance Advisor Software Installation Guide 89