Data Center Fabric Manager Enterprise User Manual v10.3.X (53-1001357-01, November 2009)

624 DCFM Enterprise User Manual
53-1001357-01
Importing a signed certificate
A
Importing a signed certificate
After a signed certificate is obtained, it must be imported and registered.
1. Select a switch from the Encryption Targets dialog box, and click the Properties tab.
FIGURE 235 Switch Properties dialog box
2. Click the Import button.
The Import Signed Certificate dialog box displays.
FIGURE 236 Import Signed Certificate dialog box
3. Browse to the location of the stored, signed certificate, and click OK.
A connection is now established between the switch and the HP Secure Key Manager (SKM).
4. Register the SKM key vault on the group leader using the CA certificate for the CA that signed
the SKM key vault certificate. The group leader automatically shares this information with
other group members.
SecurityAdmin:switch>cryptocfg --import -scp <CA certificate file>
<host IP> <host username> <host path>
SecurityAdmin:switch>cryptocfg --reg -keyvault <CA certificate file>
<RKM IP> primary
5. Display the group configuration, using the cryptocfg - - show -groupcfg command.