How do you setup a Trust Relationship?

[Lenny Davis]

Can someone pleae tell me in the most basic language possible how to setup a trust relationship between the SIM server and a Managed W2K server. Unfortunately the documentation on how do to this is completely crap and jumps around the manual more frequently than skippy the kangeroo. It is impossible to follow.

I have successfully installed the latest PSP on all W2K servers and according to the documentation this should establish the trust already but it clearly doesn't.

I am rapidly losing my patience.

Thanks

Lenny

[Ivan KOVAC · Accepted solution]

hello

1.
HPSIM: Select Options->Security->Certificates->Server Certificates, and then click Export.

2.
Open IE > Tools > Internet Options > Content > Certificates, tab Trusted Root Certification Authorities and import exported file from point 1.

3.
HP SIM: Select Options->Security->Certificates->Trusted Certificates, and then click [Import]. Find and import file wich was exported in point 1.

4.
Copy file from point 1. to a managed server in c:\Compaq\wbem\cert\

5.
repeat point 2. on managed server and use file from point 4. c:\compaq\wbem\cert\ on managed server.
repeat point 2. on managed server and use file c:\compaq\wbem\cert.xxx

6.
Check trust mode (must be a Trust by certificate) in options of Insight Web Agent.

7.
copy file c:\compaq\wbem\cert.xxx to HPSIM server.

8. repeat point 2. on HPSIM server and use file from point 7.

9.
repeat point 3. and use file from point 7.

10.
Enabling the Require
trusted certificates option in HPSIM.

good lack
I.

[Lenny Davis]

Thanks Ivan that was very comprehensive, and re-iterates my annoyance that the manual should tell you in simple steps instead of making things as difficult as possible. Very poor documentation from HP. I couldn't work out step 6 though.

Lenny

[Ivan KOVAC]

Open IE on managed server and enter

https://127.0.0.1:2381 or https://localhost:2381.

When System Management Homepage is displayed clik tab Settings.
Under HTTP server select options
There you find Trust Option.

I propose under point 7.: when the file is copied rename it. In exemple the name of managed server.
i.

[jim goodman]

The online documentation is pretty thorough on the topic of trusts and certificates and hyperlinks make it easy to navigate for your answers.

The manual is just the hardcopy online help without the hyperlinks.

- Jim

[Lenny Davis]

Well I disagree that the online documentation is good. It only maybe good if you're an "expert" on Certificates and fully understand the way they work. I certainly don't and what I wanted was a document that simplifies the procedures and I received exactly that in the first reply that was sent. After having spent several hours trying to comprehend the manual and getting nowhere I was able to complete the prodedure in 20 minutes or so from the simple document in the reply above.

[Bill_241]

I gave these directions a shot but keep getting "Could not set the disk threshold, the agent did not accept the request." Any advice?

I agree 100% about good documentation for this product. Does anyone know of a good, comprehensive source - book, training, manual, etc.?

[Tom Ferman]

I am getting the exact same error, has anyone given any information about fixing this problem?

[Rob Buxton]

I've seen the last issue a few times, seems to happen on some of my older Servers.
I just keep repeating the request and it seems to finally go through.

[Ed Kwan_2]

How do I do the same thing between linux servers ? My CMS is RHEL4 and the managed box is also RHEL4.

I am having the same issue when trying to set disk threshold.

Thanks, Ed