Certificates?

[Preston Gallwas]

Okay, forgive my lack of knowledge in this area, but my manager who deals with our organization's certificates is currently deployed in Kuwait for a few months.

We have our Insight server currently using the cert that it created on install. I know that our district has its own certificate, when I go to import it, HPSIM seems to hang, just spinning, and it takes a reboot of the server for the certificate page to work again, and the certificate doesnt finish. The rest of the server continues to function, however the cert doesnt change.

Its my understanding that by importing our districts cert to the SIM, that will allow our servers out there to 'trust' SIM as an authorized manager?

Currently, when I click the insight manager link on various systems for management agent, it does not log in...even though I've added our login to the WBEM management settings... I'm hoping this cert issue will clear that up.

Am I on the right track?

Appreciate the assistance very much!

[Haridas]

No. Adding Login info in the WBEM management settings page does not allow login to the management agent of the managed node.

To make your servers to 'trust' SIM, you have to import the SIM certificate into the server's trusted certificates list.

Here's how you do it.

If you have installed HP System Management Homepage on your servers,

Goto settings->security->TrustMode

Set the trust mode to "trust by certificate". Save configuration. Again Goto Settings -> Security -> Trusted Management Servers.

Enter "your HPSIM server name" in the field and click on Add Certificate from Server. Certficate is retrieved. Click on "Add Certificate to Trust List".

Now that server trusts your HPSIM. Repeat the same steps above to make other servers to trust HPSIM.

[Preston Gallwas]

Is that a windows-insight homepage option only? 59 of our servers are netware servers running Insight agents 7.10a

[David Claypool · Accepted solution]

Correct, the trust by certificate is available only for Windows and Linux agents.

You cannot just import any old certificate into HP SIM. You must first create a certificate signing request to be submitted to your certificate signing authority. A certificate will be generated by your CSA which then can be imported into HP SIM.

Check the security whitepaper at http://www.hp.com/go/hpsim --> Information Library for more info.

[Preston Gallwas]

Thanks much for clarifying