Server Management - Systems Insight Manager
1836372 Members
2303 Online
110100 Solutions
New Discussion

Recovering SIM Certificate

 
SOLVED
Go to solution
Kevin Kelling
Super Advisor

Recovering SIM Certificate

Just rebuilt our SIM server from scratch.

All our clients trusted by certificate, but now the certificate on the SIM Server has changed.

I can view the certificate on our servers (SIM clients) but it is not in the correct format to import into the SIM Server as a trusted certificate.

How do I get a certificate from the local HP agents on a server (Windows 7.1), into the SIM server itself?

Thanks!
4 REPLIES 4
Kevin Kelling
Super Advisor

Re: Recovering SIM Certificate

Found out where to find the cert on the "client" servers (C:\compaq\wbem\certs), but I cannot import it.

If I try to import this certificate as the new Server Certificate, it says "failure to read certificate".

Certainly there must be a recovery capability that allows you to change the certificate on the server, so that I don't have to manually go to 300 servers and reconfiure them all?

Thanks
Joel Rubenstein
Honored Contributor
Solution

Re: Recovering SIM Certificate

You might want to upgrade to SIM 4.2 and then use the "configure or repair agents" tool to push the new server certificate out to all your agents. This does not require any existing trust relationship between the server and the agents.
Kevin Kelling
Super Advisor

Re: Recovering SIM Certificate

ahh...I am running SIM 4.2 and did not realize that one could do this even without a trust.

Thanks!
Joel Rubenstein
Honored Contributor

Re: Recovering SIM Certificate

Yes this tool is a new feature of SIM 4.2. One caveat, openSSH must be properly configured on the CMS since it is used to launch the tool. It does not need to be installed on any of the managed nodes.