HP P9000 Replication Manager Software 7.3.1-00 Configuration Guide

• Importing a server certificate into the Device Manager server truststore
• Downloading a Device Manager server truststore file
• Exporting a Device Manager server self-signed certificate
• Importing a server certificate into the truststore
• Checking the server certificates imported into the truststore
After importing the server certificate for the Device Manager server to the truststore (jssecacerts),
select HTTPS as the transmission protocol in the Replication Manager GUI window for adding (or the
window for editing) the information source, and specify the port number for HTTPS communications.
For more information on how to add or edit the information source, see the online Help.
NOTE:
Regarding server certificates:
• If you manage multiple Device Manager servers as information sources, you must create server
certificates for each server and import them into the truststore (jssecacerts) for the management
server running Replication Manager.
• A secure method must be used to transmit the server certificate for the remote Device Manager to
the management server running Replication Manager.
NOTE:
If you want to restrict which cipher suites are used for SSL/TLS communication, change the value of
the server.https.enabledCipherSuites property in the server.properties file of the
Device Manager server. See the Hitachi Command Suite Software Configuration Reference Guide
for more information.
Securing communications between Replication Manager and Business Continuity
Manager Software (IHS)
To encrypt communications between Replication Manager on the management server and BCM on
the host, you must set IHS as the reverse proxy server and import the IHS server certificate into the
truststore (jssecacerts) of Replication Manager.
Configuration Guide 101