Users Guide

Managing and Recovering a Remote System
When accessing the CMC Web interface, a security warning stating that the host name of the SSL
certificate does not match the host name of CMC is displayed.
CMC includes a default CMC server certificate to ensure network security for the web interface and
remote RACADM features. When this certificate is used, the web browser displays a security warning
because the default certificate is issued to CMC default certificate which does not match the host name
of CMC (for example, the IP address).
To address this security concern, upload a CMC server certificate issued to the IP address of CMC. When
generating the certificate signing request (CSR) to be used for issuing the certificate, ensure that the
common name (CN) of the CSR matches the IP address of CMC (for example, 192.168.0.120) or the
registered DNS CMC name.
To ensure that the CSR matches the registered DNS CMC name:
1. In the left pane, click Chassis Overview.
2. Click Network.
The Network Configuration page appears.
3. Select the Register CMC on DNS option.
4. Type a CMC name in the DNS CMC Name field.
5. Click Apply Changes.
Why are the remote RACADM and Web-based services unavailable after a property change?
It may take a minute for the remote RACADM services and the web interface to become available after
the CMC Web server resets.
The CMC web server is reset after the following occurrences:
• Changing the network configuration or network security properties using the CMC web user
interface.
• The cfgRacTuneHttpsPort property is changed (including when a config -f <config file> changes it).
• racresetcfg is used or a chassis configuration backup is restored.
• CMC is reset.
• A new SSL server certificate is uploaded.
My DNS server doesn’t register my CMC?
Some DNS servers only register names with a maximum of 31 characters.
When accessing the CMC Web interface, a security warning stating that the SSL certificate was issued
by a certificate authority that is not trusted is displayed.
CMC includes a default CMC server certificate to ensure network security for the web interface and
remote RACADM features. This certificate is not issued by a trusted certificate authority. To address this
security concern, upload a CMC server certificate issued by a trusted certificate authority (such as Thawte
or Verisign).
Why is the following message displayed for unknown reasons?
159