HP Systems Insight Manager 5.2 Update 2 Technical Reference Guide

Related procedures
• Creating a Replicate Agent Settings task
• Exporting a server certificate
• Editing a server certificate
• Creating a server certificate
• Importing a server certificate
• Synchronizing certificates
• Creating a certificate signing request
• Submitting a certificate signing request
• Importing a CA-signed certificate
Related topics
• Networking and security
• Installing OpenSSH
• Managing SSH keys
Possible certificate errors
Possible certificate error messages include:
• Invalid Certificate Format is displayed in the debug log files followed by
the system this error message corresponds to.
The certificate was being sent from a program residing on a port that one of the HP SIM HP Insight
Management Agent should reside on. Another possible cause of this error is that the certificate sent to
the Central Management Server (CMS) was corrupt.
To correct this issue, verify that the Insight Management Agent running on the client system has not
been tampered with and is running as expected. Verify that no other programs on the client are using
the ports used by HP SIM. If this error continues, contact HP technical support. For information about
the ports that are used by HP SIM and its partner applications, see the Understanding HP SIM 5.0
security white paper at http://h18013.www1.hp.com/products/servers/management/hpsim/
infolibrary.html.
• Certificate has expired followed by the system name.
The expiration date of the certificate is past the current date.
To correct this issue, verify the certificate expiration date. If the expiration date is past the current date,
then a new certificate must be generated for this system. Otherwise, check the system date and time
on the Central Management Server (CMS). If the CMS is out of date, then correct the date and time
and try importing the certificate again. See “Creating a server certificate” for information about
generating a new certificate. See “Importing a server certificate” for information about importing the
certificate.
Related topics
• Networking and security
• Server certificates
• Trusted certificates
Trusted certificates
Trusted certificates provide the highest level of security. Users with administrative rights can import certificates
from other systems into the HP Systems Insight Manager (HP SIM) Trusted System Certificates List.
The purpose of the Trusted System Certificates List in HP SIM is to maintain a list of certificates in the HP SIM
keystore . Certificates include the HP SIM system certificate and the certificates of managed systems that are
trusted by the HP SIM system. These imported certificates are placed in the keystore and are displayed in
the Trusted System Certificates List.
Trusted certificates 177