Upgrade from CIM to SIM - Web agents cert problem

[Tony Cresswell]

We're upgrading to SIM from CIM7. We're planning to use the "replicate agent settings" function to ensure servers have the right settings. We are obviously unable to do this as all the servers have the certificate of the old CIM7 server. How can I update all the web agents so they have the new certificate of the SIM server?
We not planning to install any newer mgmt agents so I can't put the cert in them.

Thanks

Tony Cresswell
Dredner Kleinwort Wasserstein

[Mikael Rönnbäck]

Two ideas, we used these when we encountered the same kind of error.

Either try creating a scheduled task in SIM that sets the desired settings on the HP webagent, provided you have SNMP write access.

Alternatively as a workaround you could deploy the config file directly to the servers, either if you're using some deployment tool like MS-SMS, or via batchfiles or what you have.
If you wish to try this, have the batchfile do the following, (assuming you use default C: as your systemdrive)

1) Configure the C:\COMPAQ\WBEM\HOMEPAGE\CPQHMMDX.INI file similar to this

[HMMDConfiguration]
TrustMode=TrustByName
XENameList=yourserver.yourdomain.net

2) copy C:\COMPAQ\WBEM\HOMEPAGE\CPQHMMDX.INI from a central share out to the managed servers

3) restart the HP Web agent

This should give you basic trust by name access, which would allow you to reconfigure the agents from within SIM, hopefully you should now be able to update to trust by cert, but do test this on a limited number of machines before roll-out ;)

[Mikael Rönnbäck]

Btw, you could in theory deploy certs this way too, just copy the cert file to the server and make sure the CPQHMMD cfg files specify trust by cert instead.
However I'm not sure if this is a good secure way of handling the certificates ;)

[Tony Cresswell]

Overwriting the cpqhmmdx.ini file and restarting the web agents service seems the only way.

Thanks for the info!

Tony

[Aravindh Rajaram]

During the migration actually the IM7 certificate will be retained. Sometimes it may not. In such a case, copy the certificate store file from the IM7 install directory (usually \config\certstor) and place it in \config\certstor folder and then restart the HPSIM service. By doing so, the HPSIM certificate will be replaced by the IM7 certificate. So I think this should solve the problem.

[Tony Cresswell]

Thanks