Server Management - Systems Insight Manager
cancel
Showing results for 
Search instead for 
Did you mean: 

HP Systems Insight Manager certificate request issues

edb_1
Advisor

HP Systems Insight Manager certificate request issues

Hi, I'm trying to create a certificate request in Systems Insight Manager 5.3 SP1 for Windows. I have created a .p10 request and received the certificate, the problem is that the request does not have any alternative names. If I use the shortname for my SIM server I get a certificate error. using the FQDN works fine. I have made sure that the alternative name is filled in for the self signed certificate, but even then, when I make a cert request it does not include the alternative names. The most annoying part is that the self signed certificate includes the alternative name...

Please HP let me request the certificate with an alternative name.
1 REPLY
Man4red
Occasional Visitor

Re: HP Systems Insight Manager certificate request issues

Hope it helps someone ^^

You need to generate CSR with openssl because HP-SIM bugged that way

 

Download openssl

Find [v3_req] section in openssl.cnf and set it to someth:

 

[ v3_req ]

basicConstraints = CA:FALSE

keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names

 

[alt_names]
DNS.1 = server.domain.ru
DNS.2 = server
DNS.3 = localhost
IP.1 = 127.0.0.1

IP.2 = 192.168.1.5

 

Now set path to config (windows environment):

set OPENSSL_CONF=C:\Distr\openssl-0.9.8h-1-bin\share\openssl.cnf

 

Generate request with current server key:

openssl req -new -newkey rsa:2048 -nodes -out server.csr -key "C:\Program Files\HP\Systems Insight Manager\config\certstor\server_key.pem"

 

 

Now you can proceed with this request to your domaic CA and then import certificates (works base64 + chain).