HP StoreEver MSL Tape Libraries Encryption Key Server Configuration Guide

4. Enter the request information and then click Sign Request.
• Sign with Certificate Authority — Verify that the desired Certificate Authority is selected.
• Certificate Purpose — Select Client.
• Certificate Duration (days) — Enter the desired duration.
• Certificate Request — Paste the certificate request obtained from the autoloader or library
RMI. See “Generating the client certificate request” (page 18).
The result will be the signed client certificate, which will be used in “Installing the signed client
certificate” (page 19).
Installing the signed client certificate
Install the client certificate in the Configuration: Security page.
1. Using a text editor, copy the contents of the signed certificate and paste it into the Signed
Certificate field. Include all of the certificate text, including the ---BEGIN CERTIFICATE---
and ---END CERTIFICATE---.
2. Click Upload.
Once the autoloader or library has validated the signed certificate, it will display the Apply
New Certificate Settings button.
3. Click Apply New Certificate Settings to save the settings.
If using ESKM 4.0, you must also copy the client certificate to the ESKM 4.0 client interface.
1. In the ESKM 4.0 client interface, to Security > Local Users & Groups > Local Users for the user
associated with the library.
Configuring the KMIP feature for the 1/8 G2 Tape Autoloader and other MSL Tape Libraries 19