HP Reference Information Storage System Version 1.6 Administration Guide revision 2 (T3559-90809, September 2007)
Available certi
ficate signing requests
Table 22 Availa
ble certificatesigningrequests(CSRs)intheRISSsystem
Feature
Description
Machine Type
The host for which the CSR has been generated. The host is either a
PCC or HTTP portal.
Virtual IP
The virtual IP a
ddress of the host.
Creation Date
The date the CSR was created.
Path
The path to the CSR. The CSR files are always placed on the PCC host.
Creating a cer
tificate signing request
To create a cer
tificate signing request (CSR):
1. Complete the
form at the bottom of the SSL Configuration view.
You can creat
eonlytwotypesofCSRfiles: oneforaccesstothePCC,andoneforaccessto
the HTTP portal machines.
2. Click Generate CSR.
To install a
certificate on the PCC por tal, see "Installing a third party certificate on the PCC
portal" on page 40.
To install a certificate on each HTTP portal, see "Installing a third party certificate on the HTTP
portals" on page 40.
NOTE:
If you enter
incorrect information in the form and need to generate a new CSR, see "Deleting a certificate
signing re
quest"onpage39fortheproceduretofollow.
Deleting a certificate signing request
After a certificate signing request (CSR) is generated for the PCC or HTTP po rtals, it cannot be
regenerated. If you have entered incorrect information in the certificate request, the file must be manually
deleted before you can create a new CSR in the SSL Configuration view.
To delete a CSR:
1. Log in to the PCC console.
2. Go to /opt/keys and delete the CSR with one of the following commands:
rm -f pccCert.pem (to remove the PCC certificate request)
rm -f httpCert.pem (to remove the HTTP certificate request)
3. Upon deleting pccCert.pem and/or httpCert.pem in directory /opt/keys,logofforclosethe
PCC UI. If you do not, refreshing the PCC UI will re-create these files, and the <SSL Configuration>
page will not allow new CSRs be created.
NOTE:
Important! Do not delete the private key files (pcckey.pem or httpkey.pem).
Administrator Guide
39