Error importing web server certificate in HP SIM 5 SP4

[Morgan Simonsen]

Hi

I have successuflly aquired a new web server certificate from my won internal CA by creating a CSR from HP SIM, but when I try to import it I get this error:

Error importing signed certificate: failed to establish chain of trust from reply; first import CA certificate into Trusted System Certificates list.

I have checked all the trusted root certificate locations I can find; machine, users and service. And they all have my root CA, the CA that issued the new certificate. Is there a special HP SIM trusted roots list? THat seems kind of strange if HP SIM should be integrated with an existing PKI infrastructure.

[ramesh_naik_]

Hi Morgan,

In case you have not referred this, please refer this:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1040143

Regards,
rmn

[Morgan Simonsen]

I'm sorry, but how are these two things related? Did you just do a search for certificate and paste the link to what you found in the reply?

Anyone else have something worthwile to contribute?

[Daniel Leblanc]

Well have you read this document,

http://h10018.www1.hp.com/wwsolutions/misc/hpsim-helpfiles/hpsim_5_Security.pdf

To understnad you re probleme maybe read more on the security of HP sim

[Morgan Simonsen]

Thanks.

At first glance this actually looked like a promising document, but it conatined too little detail about certificates in HP SIM to cast any ligh on my problem.

What I basically need to know is where SIM looks to verify a certificate's path. This is called certificate path validation. It looks like it is not looking in any of the Windows locations on the local computer or on any of the CDP or AIA locations specified in the certficate I am trying to import.

[JCATC]

I am having the same issue. Anyone have a resolution to this problem?

[Phil McIlwraith]

I'm not sure about SIM 5 SP4. We are running SIM 5.1. Adding the root and any intermediary CA certs to the "trusted systems certificate" list within SIM works for 5.1.

Options
-> security
-> certificates
-> trusted certificates