Systems Management Homepage configuration problem

[Paul Mitchell_4]

I've recently installed a fresh install of HPSIM 5.0 on a fresh install of Win2k3 SP1. I've got all the agents for PSP 7.30 pre-configured except for one - the Systems Management Homepage.

When I reach the trust part of the configuration I want to be able to trust by certificate. However, when I browse for a certificate and select the certificate, I get the message

"Error: Unable to read certificate file"

It's beginning to annoy me, so I'm here hoping someone can help me out. I need to know if there's something wrong here, or if I'm doing something wrong.

I've modified the securty certificate (Options -> Security -> Certificates -> Server Certificate) to reflect our company information, then exported it. It's this certificate I'm trying to import during the SMH configuration. Is this the right one?

I was recently demo'd HPSIM 5.0 by HP themselves, and when I brought this up (as I've had the same problem before while using 4.1 and 4.2), the fella tried the same thing and got the error I'm getting.

I know there are other security alternatives, but I really want to use certificates. We need to be as secure as possible, and the other methods aren't up to scratch.

Can anyone out there help? Obviously it works ok for tonnes of other people or HPSIM would be a bit of a flop :-D

Cheers.

[Rich Purvis · Accepted solution]

Paul,
What are you using to preconfigure the SMH component? Are you doing it inside the VCRM or through the Remote Deployment Utility? I have heard of problems trying to do it with VCRM so you might try the RDU if that is your case. Also, I thought there was the ability to cut and paste the cert instead of just selecting the cert file.

-Rich

[jim goodman]

Hi Paul,

To use teh pre-cfg the SMH in the VCRM open the cert with Notepad and copy and paste all of the text into the cert box then type in a name in the name box then click add. This is more secure anyway that browsing to a cert file.

The Browse button doesn't have an assigned extention so I don't know what the developer who put it there was looking for. I know it is not certs that are txt, pkcs7, Base64 work or DER. (This may have been one of those "preview" features ~grin~ )

- Jim

[Paul Mitchell_4]

Thanks for the responses guys. I've now got the SMH configured, but I had to do it via the RDU, not within HPSIM. It's odd as it appears to be the same configuration window.

Still got a small problem though. After deployment, if I browse to the target servers newly installed SMH, the certificate installed doesn't match the certificate I used. The information in the 'issuer' section (i.e. OU, Location, etc.) doesn't match the information I have modified on the SIM server. Does this mean I've deployed the wrong certificate? I exported it from SIM first, then used that saved file to configure the SMH.

Additionally (just for fun), I recieve timeout errors while browsing to the SMH. Script errors say assorted aspects of the agents are undefined. More detail can be provided if requested. This didn't happen until after I deployed the agents. I installed over the top of a default SmartStart installed set of agents.