HP SIM 4.1 Trusted Certificate

[Paul Roberts_10]

All,

I recently completed a new installation of HP SIM 4.1 and configured all of the settings.

I am in the process of updating all servers to the latest version of the Proliant Support Pack version 7.10a to all servers. So far I have rolled this PSP out to 10 servers

The problem that I have it that all 10 of these servers have Security Trust Issues, which means that I am unable to replicate agent settings, single sign on to these servers. Interestingly though the SIM server is trusted.

I have tried to troubleshoot this many times, and have followed many of the answers displayed on this forum; Here is my progress so far;

1. I have enabled "Trust by Certificate", in the Systems management homepage of the problematic server, and imported the HPSIM certificate using the "Get cert" button. Even using "Trust all" of "Trust by Name" did not work.

2. I have imported the servers security certificate into my CMS. I enabled "Require Trusted certificates". I have tested this working on some servers, but the blue "i" still appears.

3. I have run the Software polling task and Identify tasks after every change.

4. I have made sure all the VCA agents and PSP are up to date. If logging onto the Systems Management homepage locally onto the problem server, and opening the VCA agent, I can connect to the VCRM on the CMS server, and choose the correct PSP to reference.

5. From the System Management Homepage of one of the Servers not working I have gone to the Settings Tab, then Options and then check the Trust Settings and which Servers are listed as having certificates loaded. Your new HPSIM Server should be amongst them.

6. Set the Read Only and Read Write Community names correctly

Any assistance would be gratefully received

[Rob Buxton]

For the whole relationship to work:
SNMP needs a Read Only community name common to both CIM Server and client.
Ideally a Read/Write to allow thresholds to be set etc.

I use Trust by Certificate so the following is done.
Select trust by Certificate.
Use the Get Cert from the client to import the Certificate from the HPSIM Server.
Update the Agent Configuration to include the same details as above, you can export then cut and paste the certificate.
Rerun the Device Identification screen.

For the VCA, login to the VCA on the client and configure it to reference the VCRM Server. Enter account and passsword details and then select the Reference Paq.
Run the Software Polling task to identify it.

I have not imported any certificates into my CMS.
Where is the i showing up? in the H/W Section?
Is the Server being identified or is it showing up as Unknown or Unmanaged?

[Paul Roberts_10]

Rob, Thanks for the response, although I had tried the things you have suggested

The ? is showing up in the S/W Column on the Systems HomePage with the message "Software Version Status. Security Trust Issue"

The server is being identified correctly. Any other thoughts?

[Steve Kadish]

Paul,

It sounds like you have everything configured correctly. By any chance, do your server names have the underscore "_" character in them? If they do, this is the cause of the problem. There is a limitation with Internet Explorer where it can't handle NetBios names with underscores.

- Steve

[Matt Wale]

for the VCA, you could try going to that servers vcA page and hit the change agent settings button. make sure your credentials are setup correctly and go to the next page. this page, make sure there is a psp selected. that's an issue i have, it does not automatically select the psp after a remote deployment, and the icon just sits as a question mark until i change it.

[Rob Buxton]

Also the Software Polling task needs to run to update the HPSIM screen. It's not dynamic like other parts.

[Sabina Elizabeth Patton]

We have the same issue. All settings that you suggest have been checked (SNMP between CMS and target, certificates, etc.). I have re-run software status polling, and it is still showing either a ? or an "i"

We are polling across a WAN where some of the circuits are 256k frame. Would latency be an issue?