HP Reference Information Storage System v1.6 Administrator Guide (T3559-96073, July 2007)

Available certi
cate signing requests
Table 22 Availa
ble certicatesigningrequests(CSRs)intheRISSsystem
Feature
Description
Machine Type
The host for which the CSR has been generated. The host is either a
PCC or HTTP portal.
Virtual IP
The virtual IP a
ddress of the host.
Creation Date
The date the CSR was created.
Path
The path to the CSR. The CSR les are always placed on the PCC host.
Creating a cer
ticate signing request
To create a cer
ticate signing request (CSR):
1. Complete the
form at the bottom of the SSL Conguration view.
You can creat
eonlytwotypesofCSRles: oneforaccesstothePCC,andoneforaccessto
the HTTP portal machines.
2. Click Generate CSR.
To install a
certicate on the PCC portal, see "Installing a third part y certicate on the PCC
portal" on page 40.
To install a certicate on each HTTP portal, see "Installing a third party certicate on the HTTP
portals" on page 40.
NOTE:
If you enter
incorrect information in the form and need to generate a new CSR, see "Deleting a certi cate
signing re
quest"onpage39fortheproceduretofollow.
Deleting a certicate signing request
After a certicate signing request (CSR) is generated for the PCC or H TTP portals, it cannot be
regenerated. If you have entered incorrect information in the cer ticate request, the le must be manually
deleted before you can create a new CSR in the SSL Conguration view.
To delete a CSR:
1. Log in to the PCC console.
2. Go to /opt/keys and delete the CSR with one of the following commands:
rm -f pccCert.pem (to remove the PCC certicate request)
rm -f httpCert.pem (to remove the HTTP certicate request)
3. Upon deleting pccCert.pem and/or httpCert.pem in directory /opt/keys,logofforclosethe
PCC UI. If you do not, refreshing the PCC UI will re-create these les, and the <SSL Conguration>
page will not allow new CSRs be created.
NOTE:
Important! Do not delete the private key les (pcckey.pem or httpkey.pem).
Version 1.6 39