Individual Server Certificates

[Oran Turner]

Newly upgraded IM 7 to SIM 4.2 SP1. Using trust by certificate, with the management certificates present on the servers. We can open the management page for each system without being prompted for credentials, which is correct. However, one minor annoyance is that each time the management page link is clicked within the properties for each server, we receive a unknown authority certificate warning (security alert). Is it necessary to import each individual server certificate on each management workstation in order to eliminate these warning?

[Rob Buxton]

Yes you do, and yes it is a pain.

[Thomas Jönsson]

I did a little script that we used in RDP to change the Server Certificate on all servers.

The script checks for the folder "C:\compaq\wbem\certs" if it finds it, it deletes the folder and recreates it.
Then it copies all certificates found in the same folder as the script to the newly created folder and restarts the agent.

To make this script work in RDP the job needs to copy the script and the certificates to a temporary folder on target machine before running the script.