HP Matrix Operating Environment 7.0 Integrity CMS Installation and Configuration Guide (7.0 and 7.1)

Complete the certificate exchange for Application Discovery
NOTE: The information in this help topic applies only in the situation where Application Discovery
Version 4.0 agents (or older) are running on managed nodes in the monitored network. Application
Discovery Version 4.1 agent and server do not require SSL certificate exchange for secure data
transmission.
Application Discovery uses Secure Sockets Layer (SSL) certificates to authenticate and secure data
transmission between version 4.0 (and older) Application Discovery agents and the Application
Discovery server. Once Application Discovery components are installed, the accompanying
certificate information for Application Discovery server and for Application Discovery agent must
be exchanged to allow the server and agents to recognize legitimate transmissions.
Certificate exchange can be done from within HP Systems Insight Manager or from the command
line on the central management server.
Using Systems Insight Manager to complete certificate exchange
1. Initiate certificate exchange by selecting Configure →Matrix OE Agents→Exchange AD Agent
Certificates from the Systems Insight Manager top menu.
2. Select the HP-UX systems where you want the exchange to occur using the Systems Insight
Manager system selection list. Click Apply.
3. Verify the system selection and click Next.
4. A description is displayed of the action about to take place. When you are sure that you want
to exchange certificates so that the Application Discovery agent can begin reporting data to
the server, click Run now to complete the certificate exchange.
NOTE: If you find that you are unable to exchange certificates from within Systems Insight
Manager, check the following:
• That you have the correct permissions associated with your login ID.
• That the targeted managed node is authorized to accept remote commands from Systems
Insight Manager.
To set the correct SSH configuration that authorizes the acceptance of remote commands,
enter the following command on the CMS:
mxagentconfig -a -n managed_system -u login -p password
where managed_system is the name of the target system for which you want to enable
remote communication, login is the user name on the managed system, and password is
the password of that user on the managed system.
Completing certificate exchange from the command line
From the command line, you can exchange certificates with one or more managed hosts.
1. Log in as a privileged user on the system hosting the CMS. (See “Configuring user
authorizations” (page 21) for tool access information.)
2. Assuming installation to default directories, enter the following command on HP-UX:
/opt/amgr/bin/amgr_remote_config -a -mx -n system_name -u root
and on Windows:
C:\Program Files\HP\Virtual Server Environment\bin\amgr_remot_config.bat -a -mx -n system_name
To configure multiple hosts, add -n system_name for each host to be configured.
By default, amgr_remote_config uses Secure Shell (SSH) to complete this action securely
across the network.
24 Configure Matrix OE for HP-UX