HP XP7 PA Software Installation Guide

5. Move the keystore created in the previous step to the following location <%JAVA_HOME%>/
bin/jre/lib/security using the # mv jssecacerts
/opt/java6/jre/lib/security/ command.
•
The default locations for windows and non windows are listed below:
• C:\Program Files (x86)\Hewlett-Packard\xppa\jre\lib\security
• /opt/java6/jre/lib/security/
6. Use the InstallCert program to verify if the new trusted site is working properly.
# /opt/java6/bin/java InstallCert abc.domain.company.net:443
Loading KeyStore jssecacerts...
Opening connection to abc.domain.company.net:443...
Starting SSL handshake...
No errors, certificate is already trusted
Server sent 1 certificate(s):
1 Subject CN=abc.domain.company.net, OU=DDD, O=LL, L=Bangalore, ST=Karnataka, C=IN
Issuer CN=abc.domain.company.net, OU=DDD, O=LL, L=Bangalore, ST=Karnataka, C=IN
sha1 8b 41 4e 8e 10 d8 6a e7 c1 e7 60 0c 7a 40 40 e3 dc d6 49 d9
md5 23 c0 60 52 56 e2 0b 6f 69 99 39 ff 6b 41 4e cd
7. When prompted to select the certificate to be added to the trusted keystore, look through the
list of certificates displayed and enter the serial number of the certificate that you want to add.
If you do not want to proceed, type q to quit.
Enter certificate to add to trusted keystore or 'q' to quit: [1]
q
KeyStore not changed
8. Modify the paxp_service.properties to use SSL.
Replace http with https and the IP address of the management station with its fully-qualified
domain name.
ManagementStation.Hostname=abc.domain.company.net Protocol=https
In addition, modify the xpmgmtstationaddress.prp to use SSL.
Set the http.port=443
The default locations of the file for windows and non windows are listed below :
• C:\Program Files (x86)\Hewlett-Packard\xppa\hostagent\config
• /opt/xppa/hostagent/config
9. Start the HP XP7 Performance Advisor host agent service. For more information, see “Starting,
stopping, and restarting host agent services” (page 121).
IMPORTANT: To enable SSL on a HP XP7 Performance Advisor Windows host agent, complete
the following steps in addition to the above-mentioned steps:
1. Stop the HP XP7 Performance Advisor host agent and real-time services. For more information,
see “Starting, stopping, and restarting host agent services” (page 121).
2. Copy the following jar files, sunpkcs11.jar, sunjce_provider.jar, and dnsns.jar
contents from %JAVA_HOME%\lib\ext to the <Installed HA dir>\xppa\hostagent
folder.
3. Start the HP XP7 Performance Advisor host agent and real-time services. For more information,
see “Starting, stopping, and restarting host agent services” (page 121).
Signed approach
You can generate signed SSL certificates on the server and add them to the JRE's trusted list of
certificates to enable SSL on a HP XP7 Performance Advisor.
86 Configuring SSL settings for HP XP7 Performance Advisor