HP Systems Insight Manager 5.3 Technical Reference Guide

HP SIM provides the following security certificate options:
• Export server certificate Select Options→Security→HP Systems Insight Manager Server
Certificate, and then click Export.
• Edit server certificate Select Options→Security→HP Systems Insight Manager Server Certificates,
and then click Edit.
• Create new server certificate Select Options→Security→HP Systems Insight Manager Server
Certificates, and then click New.
• Import server certificate Select Options→Security→HP Systems Insight Manager Server
Certificates, and then click Import.
Related procedures
• Exporting a server certificate
• Editing a server certificate
• Creating a server certificate
• Importing a server certificate
• Synchronizing certificates
• Creating a certificate signing request
• Submitting a certificate signing request
• Importing a CA-signed certificate
Related topics
• Networking and security
• Replicating trusted certificates
• Possible certificate errors
• Installing OpenSSH
• Managing SSH keys
Creating a server certificate
Users with administrative rights can create a new self-signed certificate when they replace the HP SIM SSL
server certificate and private key in the following situations:
• The integrity of the HP SIM server certificate private key is compromised
• The existing HP SIM server certificate expires
This self-signed certificate is configured to expire 10 years from the date of creation.
Create a new self-signed certificate when you must replace the HP SIM SSL server certificate and private
key. The public key is included in the certificate that goes out to the client. The private key is kept secure in
the keystore database on the HP SIM server file system. The public and private key pair of the HP SMH
(residing on the same system) is overwritten with the new HP SIM public and private key pair.
IMPORTANT: Replacing the SSL server certificate and private key invalidates the existing HP SIM server
certificate and the HP SMH certificate wherever they might be imported, such as browsers and the Trusted
Management Servers List in other HP SMHs. Replace the previous server certificate with the new server
Server certificates 171