HP Integrity rx5670 Windows Integrity nPartition Guide - Page 40

Miscellaneous installation issues, Configuring for secure WBEM communications

Page 40 highlights

Installing nPartition Management Utilities Miscellaneous installation issues Miscellaneous installation issues The installation-related issues described in this section may or may not apply to you, depending on your connection method and mode. Configuring for secure WBEM communications To configure for secure WBEM communications: Part 1 - On the Server: Step 1. Locate the WBEM SSL Certificate file (cert.pem) on the remote nPartition that you want to connect to. Step 2. To verify you are copying the correct certificate file, open the CIM Server/WMI Mapper configuration file (%PEGASUS_HOME%\cimserver_current.conf) on the remote nPar, and look for the sslCertificateFilePath entry. This entry indicates the server certificate file currently configured for use by the CIM Server/WMI Mapper (on a Windows system, this entry is usually: %SystemDrive%\hp\sslshare\cert.pem). NOTE If there is no sslCertificateFilePath entry, the default server certificate file is found here: %PEGASUS_HOME%\server.pem. Step 3. Copy the certificate file located in Step 2 (cert.pem or server.pem) to the client system. Part 2 - On the Client: Step 1. Import the certificate (cert.pem) into the parmgr keystore (parmgr.keystore) by entering the following command at the command line (all one line): %JAVA_HOME%\bin\keytool -import -alias server_hostname -file cert.pem -keystore %SystemDrive%\hp\sslshare\parmgr.keystore Step 2. When prompted, enter the password to the keystore. If the parmgr.keystore file does not yet exist (in other words, if this is the first certificate you have tried to import), the keytool -import command creates a new keystore file and any password you enter becomes the assigned password for this new keystore. NOTE Use a password that you will remember. You will need it the next time you import a certificate into the keystore. Step 3. To enable certificate validation for the commands used by Partition Manager, append the contents of cert.pem to the end of the file: %SystemDrive%\hp\sslshare\known_hosts.pem. NOTE Earlier versions of the nPartition commands used client.pem, instead of known_hosts.pem. Consult the nPartition Commands release notes to determine which file you should use. Step 4. Finally, restart the JSP/Servlet Container by restarting the HP System Management Homepage service (SysMgmtHP), or by rebooting Windows. 40 Chapter 2

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160

Installing nPartition Management Utilities
Miscellaneous installation issues
Chapter 2
40
Miscellaneous installation issues
The installation-related issues described in this section may or may not apply to you,
depending on your connection method and mode.
Configuring for secure WBEM communications
To configure for secure WBEM communications:
Part 1 — On the Server:
Step 1.
Locate the WBEM SSL Certificate file (
cert.pem
) on the remote nPartition that you
want to connect to.
Step 2.
To verify you are copying the correct certificate file, open the CIM Server/WMI Mapper
configuration file (
%PEGASUS_HOME%\cimserver_current.conf
) on the remote nPar, and
look for the
sslCertificateFilePath
entry. This entry indicates the server certificate
file currently configured for use by the CIM Server/WMI Mapper (on a Windows system,
this entry is usually:
%SystemDrive%\hp\sslshare\cert.pem
).
NOTE
If there is no
sslCertificateFilePath
entry, the default server certificate file is found
here:
%PEGASUS_HOME%\server.pem
.
Step 3.
Copy the certificate file located in Step 2 (
cert.pem
or
server.pem
) to the client system.
Part 2 — On the Client:
Step 1.
Import the certificate (
cert.pem
) into the parmgr keystore (
parmgr.keystore
) by
entering the following command at the command line (all one line):
%JAVA_HOME%\bin\keytool -import -alias server_hostname
-file cert.pem -keystore %SystemDrive%\hp\sslshare\parmgr.keystore
Step 2.
When prompted, enter the password to the keystore. If the
parmgr.keystore
file does
not yet exist (in other words, if this is the first certificate you have tried to import), the
keytool -import
command creates a new keystore file and any password you enter
becomes the assigned password for this new keystore.
NOTE
Use a password that you will remember. You will need it the next time you import a
certificate into the keystore.
Step 3.
To enable certificate validation for the commands used by Partition Manager, append the
contents of
cert.pem
to the end of the file:
%SystemDrive%\hp\sslshare\known_hosts.pem
.
NOTE
Earlier versions of the nPartition commands used
client.pem
, instead of
known_hosts.pem
. Consult the nPartition Commands release notes to determine which
file you should use.
Step 4.
Finally, restart the JSP/Servlet Container by restarting the HP System Management
Homepage service (
SysMgmtHP
), or by rebooting Windows.