Recovering SIM Certificate

[Kevin Kelling]

Just rebuilt our SIM server from scratch.

All our clients trusted by certificate, but now the certificate on the SIM Server has changed.

I can view the certificate on our servers (SIM clients) but it is not in the correct format to import into the SIM Server as a trusted certificate.

How do I get a certificate from the local HP agents on a server (Windows 7.1), into the SIM server itself?

Thanks!

[Kevin Kelling]

Found out where to find the cert on the "client" servers (C:\compaq\wbem\certs), but I cannot import it.

If I try to import this certificate as the new Server Certificate, it says "failure to read certificate".

Certainly there must be a recovery capability that allows you to change the certificate on the server, so that I don't have to manually go to 300 servers and reconfiure them all?

Thanks

[Joel Rubenstein · Accepted solution]

You might want to upgrade to SIM 4.2 and then use the "configure or repair agents" tool to push the new server certificate out to all your agents. This does not require any existing trust relationship between the server and the agents.

[Kevin Kelling]

ahh...I am running SIM 4.2 and did not realize that one could do this even without a trust.

Thanks!

[Joel Rubenstein]

Yes this tool is a new feature of SIM 4.2. One caveat, openSSH must be properly configured on the CMS since it is used to launch the tool. It does not need to be installed on any of the managed nodes.