beautypg.com

HP System Management Homepage-Software User Manual

Page 72

background image

or SMH failed to verify it against CRL

. In such a case, you have to

manually log in to SMH.

To use a CA Certificate for SSO, follow the prerequisites listed here to:

Create a certificate request

Get the signed certificate from CA

Get the Root Certificate and the CRL from CA

Import the signed certificate in SIM

Set up SMH

Configure on SMH system

Create a certificate request:
1.

Log in to SIM.

2.

Select Options

→Security→HP System Insight Manager Server Certificate.

3.

Click Import.

4.

Click more… at the end of first option Create a Certificate Signing Request
(CSR).

5.

Click Create to download PKCS 10 certificate file and save it.

6.

Submit the certificate request to CA to get a signed certificate.

Get the signed certificate from CA:

NOTE:

You can also set up local certificate services such as Microsoft Certificate

Services to get the signed certificate.

1.

Access http://hostname/certsrv, where hostname is the name of the
machine having certificate services.

2.

Select Request a certificate.

3.

Select Advanced certificate request.

4.

Select Submit a certificate request by using a base-64-encoded CMC, PKCS
#10 file, or Submit a renewal request by using a base-64-encoded PKCS #7
file.

5.

To download a certificate that is pending for approval:
a.

Access http://hostname/certsrv, where hostname is the name
of the machine having certificate services.

b.

Click View the status of a pending certificate request and download the
signed certificate to save it.

Get the Root Certificate and the CRL from CA:

NOTE:

You can also set up local certificate services such as Microsoft Certificate

Services to get the Root Certificate and the CRL.

1.

Access http://hostname/certsrv, where hostname is the name of the
machine having certificate services.

2.

Select Download a CA certificate, certificate chain, or CRL.

3.

Select Base64 as encoding method.

4.

Select Download a CA certificate.

5.

Click Save.

6.

Click Download latest base CRL.

7.

Click Save to save the CRL.

Import the signed certificate in SIM:
1.

Log in to SIM.

72

Troubleshooting topics