Hi,
Could you try this solution:
1. Create directory where you copy certificate and CRL
a) New-Item C:\WorkArea\CaFiles -type directory
b) New-Item C:\WorkArea\CaFiles\cacerts -type directory
c) New-Item C:\WorkArea\CaFiles\cacrls -type directory
2.Get your rootca and/or subca certificate, and copy to cacerts directory.
But this certificates should have PEM( ASCII base64) format and extension cer!!! Important is this file should be PEM text file, not binary format like DER. You can use this command openssl x509 -in cert.cer-text -noout to check this. If You obtain error like this:
unable to load certificate
13978:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1306: 13978:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:380:Type=X509
that means you have, not correct format. You could convert using openssl x509 -in cert.crt -inform der -outform pem -out cert.cer
3. Get your rootca and/or subca CRL , and copy to cacrls directory. But this CRL should have PEM( ASCII base64) format and extension crl!!!
You can check crl have correct format using openssl.exe crl -text -noout -in .\cacrl.crl
If You obtain error like this:
unable to load CRL
13644:error:0906D06C:PEM routines:PEM_read_bio:no start line:./crypto/pem/pem_lib.c:647:Expecting: X509 CRL
that means you have, not correct format. You could convert using openssl crl -inform DER -in crl.crl -outform PEM-out crl_.crl
4. When you copy certificate and crl, you should inform HP System Management Homepage, about this
using cmd: C:\hp\hpsmh\bin\smhconfig.exe -W C:\WorkArea\CaFiles, and restart service C:\hp\hpsmh\bin\smhconfig.exe -r
5. From HPSIM connect to managed node System Management Homepage, import certificates to Trusted Managment Servers(if you must).
