HP Systems Insight Manager 5.2 Update 2 Technical Reference Guide

Related procedures
• Importing a server certificate
• Creating a certificate signing request
• Importing a CA-signed certificate
Related topics
• Server certificates
• Networking and security
• Installing OpenSSH
• Managing SSH keys
Importing a CA-signed certificate
After creating a certificate signing request (CSR) and having it signed by a Certificate Authority (CA), you
can import the signed certificate .
The only importable certificate format is PKCS #7. If the certificate reply received from the CA is a single
certificate, then first import a self-signed root certificate from the issuing CA into the HP Systems Insight
Manager (HP SIM) Trusted System Certificates List. After importing the CA root certificate, the certificate
reply can then be imported to serve as the HP SIM server certificate.
NOTE: On Windows and Linux, this process also affects the local System Management Homepage certificate
and private key on HP-UX systems, it affects the Web-Based Enterprise Management (WBEM) Services
certificate and private key.
NOTE: HP SIM only supports importing certificates that have a public key size of 2,046 bits or less.
To import the signed certificate reply from a CA:
1. Select Options→Security→Certificates→Server Certificates, and then click Import. The Import
Server Certificate section appears.
2. Click more next to Import signed certificate reply from CA. The Import Signed Certificate Reply
section follows the Import Server Certificate section.
3. Click Browse next to the Certificate filename field. The Choose file dialog box appears.
a. Navigate to the location where the signed certificate is stored.
b. Select the correct file name, and then click Open.
The file name appears in the Certificate filename field.
4. Click Import. The signed certificate is imported.
After creating a CSR or importing the server certificate, reboot the HP SIM server for the HP SIM server
certificate to synchronize it with the System Management Homepage certificate and the certificate
sharing directory. Synchronizing the certificates prevents repeated browser security alerts when browsing
to HP Insight Management Agent on the HP SIM server, which enables HP SIM and the local System
Management Homepage to update their Secure Sockets Layer (SSL) server certificates and private keys .
Related procedures
• Importing a server certificate
• Creating a certificate signing request
• Submitting a certificate signing request
Related topics
• Server certificates
• Networking and security
• Installing OpenSSH
• Managing SSH keys
174 Networking and security