HP SIM V5.1 User Guide (356920-009, January 2007)

1. Select Options→Security→Certificates→Server Certificates, and then click Import. The Import
Server Cer tificate section appears.
2. Click more next to Import signed certificate reply from CA. The Import Signed Certificate Reply
section appears below the Import Server Certificate section.
3. Click Browse next to the Cer tificate filename field. The Choose file dialog box appears.
a. Navigate to the location where the signed certificate is stored.
b. Select the correct file name, and click Open.
The file name appears in the Certificate filename field.
4. Click Import. The signed certificate is imported.
After creating a CSR or importing the server certificate, reboot the HP SIM server for the HP SIM server
certificate to be synchronized with the System Management Homepage certificate and the certificate
sharing directory. Synchronizing the certificates prevents repeated browser security alerts when browsing
to HP Insight Management Agent on the HP SIM server, which enables HP SIM and the local System
Management Homepage to update their Secure Sockets Layer (SSL) server certificates and private keys .
Related procedures
• Importing a server certificate
• Creating a certificate signing request
• Submitting a certificate signing request
Related topics
• Server certificates
• Networking and security
• Installing OpenSSH
• Managing SSH keys
Synchronizing certificates
When the HP Systems Insight Manager server certificate is created or modified, the public and private
certificate key pair of the System Management Homepage certificate is overwritten with the HP Systems
Insight Manager public and private key pair.
NOTE: This feature is available in the unlikely event that the certificates become unsynchronized for an
unknown reason.
NOTE: For the certificate sharing feature to work in HP-UX, OpenSSL must be installed in the
/OPT/APACHE/SSL/BIN/ directory (default for HP-UX installs). For the certificate sharing feature to work
in Linux, OpenSSL must be installed in the /USR/BIN/ directory (default for Linux installs).
Related procedures
• Creating a server certificate
• Exporting a Server Certificate
• Importing a server certificate
• Editing a server certificate
Related topics
• Server certificates
• Networking and security
• Replicating trusted certificates
• Installing OpenSSH
• Managing SSH keys
Server certificates 161