Service Manager / Service Center Practitioners Forum
Showing results for 
Search instead for 
Do you mean 

How to use HP SM Web Service via SSL?

SOLVED
Go to Solution
Frequent Advisor

How to use HP SM Web Service via SSL?

Hello Community.

I have integration with external web services system.  External web service required SSL connection. I use OpenSSL tools and add cert file for External system  into Cacerts file. In sm.ini i write

truststoreFile:cacerts

truststorepass: changeit

Its works. I can export my data into web service External System.

 

External system export data into  HP Service Manager and used my web services HPSM. External system can work with my web service only via SSL.

I try to configure it but nothing happens.

I requested a certificate for my server HP SM. Colleagues provided file: cert.crt

Then using Open SSL and add thesi cert file into cacerts, servercert.keystore, trustedclient.keystore, clientcerts.keystore

This parameters i add in sm.ini file

httpsPort:13443

sslConnector:1

ssl:1

ssl_reqClientAuth:0

keystoreFile:servercert.keystore

keystorePass:p@ssw0rd

ssl_trustedClientsJKS:trustedclients.keystore

ssl_trustedClientsPwd:p@ssw0rd

truststoreFile:cacerts

truststorePass:changeit

But i can't connect to my server with Full Client. I do not need to use SSL for users connection. I need uses SSL for integration with external web service and HP SM.

Tell me please how to properly configure my system HP Service Manager 9.21 patch 8?

 

 


 

8 REPLIES
Honored Contributor

Re: How to use HP SM Web Service via SSL?

[ Edited ]

Hi Portal 230,

 

I am sending you web servce best practice guide attached.  You can find information starting on page 51 - It will help you by configuring your system 

You need to follwo chapter - Using SSL to consume Service Manager Web Services

I hope this will help you :)

HP Support
If you find that this or any post resolved your issue, please be sure
to mark it as an accepted solution.
Please also give kudo if you find it interesting :)
Frequent Advisor

Re: How to use HP SM Web Service via SSL?

[ Edited ]

Thank you for reply.

 

Sorry, but this document is not help me.

For configure certificates I used Trusted Sign-on White paper.

 

Maybe mistake in my sm.ini file?

 

# ServiceManager Initialization file

# (c) Copyright 2008 Hewlett-Packard Development Company, L.P.

# Configuration Modified Date:08.08.12 9:59

shared_memory:32000000

log:../logs/sm.log

 

system:13080

 

#httpPort:13080

httpsPort:13443

 

language:UTF8

[sqlserver]

sqldb:hpsm921

sqllogin:sa/***

querysecurity:0

sqldictionary:sqlserver

plugin0:kmplugin.dll

webservices_sessiontimeout:1800

threadsperprocess:30

ir_asynchronous:1

trustedsignon:1

sslConnector:1

ssl:1

ssl_reqClientAuth:0

keystoreFile:servercert.keystore

keystorePass:p@ssw0rd

ssl_trustedClientsJKS:trustedclients.keystore

ssl_trustedClientsPwd:p@ssw0rd

truststoreFile:cacerts

truststorePass:changeit

 

 

 

Honored Contributor

Re: How to use HP SM Web Service via SSL?

Hi again,

 

 I am sending you three other files that should help you. Two of them are guides and the .rar file is the file ,wich you should use to generate the certificate. - BTO_Cert_Gen_V1.0_2012-12-18.zip

HP Support
If you find that this or any post resolved your issue, please be sure
to mark it as an accepted solution.
Please also give kudo if you find it interesting :)
Trusted Contributor

Re: How to use HP SM Web Service via SSL?

[ Edited ]

Per the help file:

SSL: This parameter defines whether the Service Manager server requires SSL connections from all incoming client requests. Enable this parameter to require all clients to use SSL connections. Unless you also require each client to have its own certificate, clients can connect to the server using anonymous SSL.

If you do not require all clients to use https, remove the following line from your .ini file
ssl:1

I should caution that now your WSDL could potentially be accessed by http.  You should be able to import your securitycert to the full client and then you should be able to access SM without having to remove the ssl parameter.

Highlighted
Frequent Advisor

Re: How to use HP SM Web Service via SSL?

Thank you very much.

This doc's helped me configured sm.ini and sm.cfg files.

I used TSO_LWSSO_Conf_guide for create certs.

For my task needed connect to external web sevice and used other certificate. I added certificate external system in file cacerts. All work properly.

 

 

Trusted Contributor Trusted Contributor

Re: How to use HP SM Web Service via SSL?

can you please provide me the steps you used to import thrst party certificate inside HPSM cacerts

Occasional Advisor

Re: How to use HP SM Web Service via SSL?

Trusted Contributor Trusted Contributor

Re: How to use HP SM Web Service via SSL?

this link is for java.

I mean there are 2 files "cacerts" and "trustedclient.keystore". In which file the import will be done? And I can see that "cacert" file is at many places, its inside RUN folder as well as java/bin folder. Which is the exact cacerts file and where it needs to be put?