Insight Manager certificate about to expire.

[Paul_JT]

Hi,  I need some help with a certificate issue.

The certificate used by our HPSIM is due to expire, and I have some questions about renewing it.  I can go get a new cert from our CA no problem and import it (unless you can renew the old one somehow??)    The bit I am unsure with is the client servers..   will I need to put the new certificate on all the servers?  either by deploying it within SHM or manually configuring and importing.  They won't somehow pickup the new one from the management server?

[nhbilly]

The frist time I ran a discovery the certs was installed. Maybe running a rediscovery on a single to see if the certs is installed? I rather not touch each machine.

[Mahmoud Ibrahim]

Hi Paul,
You can renew your certificate from your CA and your new CA, but your concern is right about SMH trust to CMS, definatly impacted but solution is quite easy, by doing the trust manually on one Host and replicate it to other nodes from HP SIM.

Choose Deploy menu ->Replicate Agent Settings
Select your manually trusted node press next
and select your CMS certificate from the tree
HP System Management Homepage [edit]
Settings
Trusted Certificate Properties
Trusted Certificate (value is YourSIMserver)

Apply it to other nodes.

This will work with SMH on your servers but I do not have a way to do the same to iLOs and OA.

[Mahmoud Ibrahim]

[shocko]

You'll have to renew the cert for the CMS but then you'll have to distibute this cert to the monitored machines as by running a 'replicate agent settings' job or using the agent command line.