Error: Importing certificate failed - HP SIM - Ubuntu 10.04

[pgustavsson]

Dear All,

I have installed PSP 8.50 on my Dl3850G5 running ubuntu 10.04
I.e this package : http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.jsp?lang=en&cc=us&prodTypeId=15351&prodSeriesId=1121516&swItem=MTX-aa33f3378fc04981981e73c5a6&prodNameId=3288134&swEnvOID=4093&swLang=8&taskId=135&mode=4&idx=1

System management homepage and all agents seems to work fine.

However we also have a HP SIM 6.0 Server.

And when i try to import the certificate from my hp sim server (trusted management server section in SMHP Security settings) i only get this error message :
"Error: Importing certificate failed"

Very similar to this thread that was never answered : http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1434599

Any help is very appriciated!

PS i have the same problem on two ubuntu servers, however under windows & xenserver we have no issues importing the hp sim certificate

Br
Patric

[Rob Buxton]

You could try importing the certificate manually.
Export the certificate from HPSIM, open it in something like Notepad and then copy the contents into the certificate box on the Ubuntu server.
That might indicate if it's an issue storing the certificate or retrieving it from the SIM Server.

[pgustavsson]

Hi,

Many thanks for the reply.

I guess it is a problem storing the certificate, as i get the exact same message when i try the manual copy & paste method.

i.e i exported the certificate by following : http://www.hp.com/wwsolutions/misc/hpsim-helpfiles/mxhelp/mxportal/en/admin_cert_trusted_export.html#N10031

Then went to the servers system management homepage | settings | smh | security | Trusted Management Servers | Add Certificate : pasted the cert info into the Base64 encoded field and clicked on import :

"Error: Importing certificate failed"

Br
Patric

[Sudhakar Subramaniam]

HI,
Go to trust by certificate in the following link and check if that helps.

http://bizsupport2.austin.hp.com/bc/docs/support/SupportManual/c02537449/c02537449.pdf


Page 56

[pgustavsson]

Hi Thanks for the link, but the manual does not seem to contain any troubleshooting info for the problem i am having, i.e i beleive i am taking the right steps when i try to add the certificate. (there is not much you can do wrong in the smhp procedure, i.e all you do is provide an ip address to your hp sim server)

Br
Patric

[pgustavsson]

Hello,

Workaround for importing the certificate is to modify permissions on this directory : /opt/hp/hpsmh/certs
perhaps overkill but i set mine to chmod 777

Now the certificate imports fine.

However, i still have one remaining problem.

If i for example pull out one of my redundant power supplies, i can see in the servers local system management homepage that the status of the server is major and that one of the power supplies is faulty.

But this event does not get picked up by my hp sim server.

Even though i have now got the trusted management server certificate installed, single sign on does not work from hp sim (i have logged in with my username and password in hp sim, and added the root password for this perticular server in hp sim for single sign on)

Could this still be an issue with the certificate? or is it more likely an snmp issue?

my snmpd.conf looks like this :

# Following entries were added by HP Insight Management Agents at
# Tue Nov 30 11:40:19 CET 2010
dlmod cmaX /usr/lib64/libcmaX64.so
rwcommunity public localhost
rocommunity string myhpsim.dns.entry
trapcommunity string
trapsink myhpsim.dns.entry
syscontact Root (configure /etc/snmp/snmpd.local.conf)
syslocation Unknown (configure /etc/snmp/snmpd.local.conf)

# ---------------------- END --------------------

Any help is very appriciated!

[pgustavsson]

Will close this thread and open a new one for the remaining problem.

The cerificate issue was resolved by manually exporting the certificate and placing the .pem file into /opt/hp/hpsmh/certs