HP Systems Insight Manager certificate request issues

[edb_1]

Hi, I'm trying to create a certificate request in Systems Insight Manager 5.3 SP1 for Windows. I have created a .p10 request and received the certificate, the problem is that the request does not have any alternative names. If I use the shortname for my SIM server I get a certificate error. using the FQDN works fine. I have made sure that the alternative name is filled in for the self signed certificate, but even then, when I make a cert request it does not include the alternative names. The most annoying part is that the self signed certificate includes the alternative name...

Please HP let me request the certificate with an alternative name.

[Man4red]

Hope it helps someone ^^

You need to generate CSR with openssl because HP-SIM bugged that way

Download openssl

Find [v3_req] section in openssl.cnf and set it to someth:

[ v3_req ]

basicConstraints = CA:FALSE

keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names

[alt_names]
DNS.1 = server.domain.ru
DNS.2 = server
DNS.3 = localhost
IP.1 = 127.0.0.1

IP.2 = 192.168.1.5

Now set path to config (windows environment):

set OPENSSL_CONF=C:\Distr\openssl-0.9.8h-1-bin\share\openssl.cnf

Generate request with current server key:

openssl req -new -newkey rsa:2048 -nodes -out server.csr -key "C:\Program Files\HP\Systems Insight Manager\config\certstor\server_key.pem"

Now you can proceed with this request to your domaic CA and then import certificates (works base64 + chain).