HP Instant Capacity Version 10.x User Guide (762794-001, March 2014)

..(snip)..
Fingerprint: 13:35:9a:af:32:f7:9e:f8:88:73:ea:b9:8e:72:3d:34:c0:e0:b3:2f
AGM # openssl x509 -in /etc/opt/iCAP/GiCAP_OA_USER_CERT.pem -noout -fingerprint
SHA1 Fingerprint=47:14:1C:2B:44:3F:AE:98:C6:95:11:28:CB:6C:AC:05:D0:11:CA:DE
SGM # openssl x509 -in /etc/opt/iCAP/GiCAP_OA_USER_CERT.pem -noout -fingerprint
SHA1 Fingerprint=13:35:9A:AF:32:F7:9E:F8:88:73:EA:B9:8E:72:3D:34:C0:E0:B3:2F
In the above case, the certificate associations are correct. If the users have the incorrect certificate
association, remove the association: remove user certificate <active_gm|standby_gm>
If either of the users or both users do not have the correct association, associate them with the
proper certificate:
download user certificate <active_gm|standby_gm>
ftp://root:(password)@(AGM/SGM IP
Address):/etc/opt/iCAP/GiCAP_OA_USER_CERT.pem
Action: If neither active_gm nor standby_gm has any certificate issue, there is no discrepancy
regarding the iCAP inventory usage data for the member between GiCAP_db and OA. In this
case, all the other member removals need to be followed by the above member removal.
# icapmanage -a -S sgm.corp.hp.com
Enter the password for root on sgm.corp.hp.com:
ERROR: Cannot set up secure communication with sgm.corp.hp.com.
This error can occur for a number of reasons. Verify that you have access
to the specified host and that it is running a compatible and supported
version of Instant Capacity.
ERROR: The following low-level error occurred:
CIM_ERR_NOT_SUPPORTED: PGS04001: Provider is blocked.
icapmanage command failed.
#
The status for HP_GiCAPProviderModule is not OK on SGM.
Action: Execute cimprovider -em HP_GiCAPProviderModule on SGM.
# icapmanage -a -S sgm.corp.hp.com
Enter the password for root on sgm.corp.hp.com:
icapmanage command failed.
ERROR: The following low-level error occurred:
PGS08001: CIM HTTP or HTTPS connector cannot connect to sgm.corp.hp.com:5989.
Connection failed.
#
.
Confirm if sslClientVerificationMode is set to optional and enableHttpsConnection to true both
on AGM and SGM:
# cimconfig -lc | grep -e sslClient -e enableHttps
sslClientVerificationMode=optional
enableHttpsConnection=true
#
If the values do not appear as mentioned above, perform the following commands on AGM or
SGM or both:
# cimconfig -s sslClientVerificationMode=optional –p
# cimconfig -s enableHttpsConnection=true -p
# cimserver -s; cimserver
# icapmanage -a -S sgm.corp.hp.com
Enter the password for root on sgm.corp.hp.com:
ERROR: Cannot set up secure communication with sgm.corp.hp.com.
129