HP Systems Insight Manager 5.2 Update 2 Technical Reference Guide

a. The Common Name (CN) field holds the parameter that the browser uses for name comparison
when browsing to the Central Management Server (CMS). This field can be updated with other
name formats, such as fully qualified names, and can contain up to 255 characters.
b. (Optional) In the Alternative Names field, enter multiple system names separated by a comma.
If a name identical to the CN is specified in the Alternative Names field, it is not duplicated in
the certificate.
Alternative names are case-sensitive. Therefore, if a duplicate case-sensitive name is entered, they
are not duplicated in the certificate. For example, if SYS1, sys1, and SYS1 are entered, SYS1 is
only listed once in the certificate.
The alternative names might be displayed in a different order from the order you enter them.
However, this does not affect their usage.
c. In the Organization (O) field, enter the name of your organization. This field can contain up to
64 characters.
d. In the Organizational Unit (OU) field, enter the name of your department. This field can contain
up to 64 characters.
e. In the Locality (L) field, enter the name of your city. This field can contain up to 128 characters.
f. In the State (S) field, enter the name of your state. This field can contain up to 128 characters.
g. In the Country (C) field, enter the name of your country. This field can contain up to two
alphanumeric characters, using the two-letter country codes.
3. After changes are made, click OK. If you click Cancel, you are returned to the Server Certificate
page without creating a new server certificate. A warning appears, reminding you about the effects of
changing the certificate and private key. If you click OK in the warning box to continue, a new 1,024-bit
key-pair and a new self-signed certificate are generated. The old key-pair and certificate are not
retrievable unless a backup was created manually before this process. The new certificate and private
key take effect the next time HP SIM is restarted.
4. Reboot the HP SIM server to ensure the new certificate is properly synchronized with the local System
Management Homepage and any applications or components using the certificate sharing directory.
After creating a new server certificate, reboot the HP SIM server for the HP SIM server certificate to be
synchronized with the HTTP server certificate. Synchronizing the certificates prevents repeated browser
security alerts when browsing to HP Insight Management Agent on the HP SIM server.
Related procedures
• Exporting a server certificate
• Importing a server certificate
• Editing a server certificate
• Synchronizing certificates
Related topics
• Server certificates
• Installing OpenSSH
• Managing SSH keys
Editing a server certificate
Edit a server certificate to change fields in an existing certificate. This modification might be required if you
are submitting a certificate signing request (CSR) to an external Certificate Authority (CA).
NOTE: On Windows and Linux, this process also affects the local System Management Homepage certificate
and private key on HP-UX systems, it affects the Web-Based Enterprise Management (WBEM) Services
certificate and private key.
NOTE: Valid characters for each of these fields are letters a through z (lowercase), A through Z (uppercase),
numbers 0 through 9, and the following special characters: ‘ ( ) + , - . / : ? space _ and ~. Each field must
contain at least one non-white space character.
To edit a server certificate:
170 Networking and security