dmz servers trust by certs

[Martin T. Greene]

Hi

I am building a SIM server in our DMZ. I have 2301, 2381 and the two snmp ports open. I am seeing traps I can get to the server's system management page. But when I try to get the cert from the dmz SIM server I cannot.

Is there another port that needs to be open

thanks

[Rob Buxton]

http://h10018.www1.hp.com/wwsolutions/misc/hpsim-helpfiles/ManagingHPServers-withHPSIM.pdf

Should tell you all you need to know about what ports in the firewall need to be opened.

[H.Y. Yiu]

you can also place the Sim cert file into the insight agent system management home page cert directory. by default C:\hp\hpsmh\certs.

[Stefan måhl]

I guess that you need to open port 2381 in both directions (inbound and outbound)
//Stefan

[Eugene Marko]

Hello Marty,

There is also possibility to add SIM trust certs manually on SMH:
Settings -> Security -> Trusted Management Servers -> Import Certificate Data

This feature can be really helpful if you don't want to open more ports in firewall then opened till now.

Regards,
Eugene.