HP Systems Insight Manager User Manual
Page 542
directory. On HP-UX, OpenSSL should be installed in the /opt/openssl/bin/ directory. Install OpenSSL
to the correct directory, and then create a new HP SIM certificate to resolve this issue.
I am receiving security alert dialog boxes on the System Page when I click a system link to the Insight
Management Agents that reside on the HP SIM Server that I am logged into.
Solution 1: If the security alert states that the name on the certificate does not match the name of the site,
you can change settings in HP SIM so that links to systems use the same format as the names in the system
certificate. View the system's certificate to see the name format it is using and complete the following:
1.
Select Options
→Security→System Link Configuration. The System Link Configuration page
appears.
2.
Select from the following options:
•
Use the system name
. Select this option to use the system name.
•
Use the system IP address
. Select this option to use the system IP address. For systems with
multiple addresses, multiple links might be provided.
•
Use the system full DNS name
. Select this option to use the full system DNS name.
Note: During
, the full system DNS name will be used as the primary lookup key if it is available.
Otherwise, the IP address is used.
Note: In the case of systems with multiple network interfaces, selecting the Use the system name
provides only one link per destination to the system, whereas Use the system IP address provides
multiple links to the system.
3.
Click OK to save and apply the changes.
If your system certificates use a name format that does not resolve correctly on your network, then select a
link format that does. In this case, you continue to see this name mismatch alert even if you have imported
the system certificate into the browser trusted list. This condition can be avoided by disabling the check in
Internet Explorer 6.0 SP1. To do this, select Tools
→Internet Options, and click the Advanced tab. Under
Security
settings, clear the Warn about invalid site certificates option. However, HP does not recommend
using this procedure, and it should be considered carefully in accordance with your own security policies
and guidelines.
Disabling the Warn about invalid site certificates setting in your browser reduces your ability to properly
identify the HP SIM server or managed system you are browsing to and any external or internal internet sites
having nothing to do with web-based management products.
Solution 2: If the security alert is for another reason, such as an untrusted or invalid certificate, see
for more information.
When accessing HP SIM after installation is complete, I receive a message stating that the host name in the
certificate does not match the URL.
Solution: Create a new certificate after installation with the IP address in the CN field. See
in the Creating a Server Certificate section for more information. After the new certificate is created, restart
the HP SIM service.
I receive a security alert when accessing a system.
Solution: Be sure that you have the system server certificate imported into your browser and that you browse
to the system using the same name as specified in the certificate. For example, having Browsing to localhost
set in Internet Options is most likely the cause for this security alert.
I receive the following error message when browsing to different pages within HP SIM:
This window contains both secure and non-secure items
Solution: Several conditions could cause the browser to display this warning message:
▲
Improper version of Internet Explorer
There is a known problem in Internet Explorer 6.0 that causes this warning message to be erroneously
displayed. Pages within HP SIM that are likely to experience the problem include the Home page and the
Task Results
page, though this problem is not limited to those pages.
To resolve this problem with the browser, ensure that you have at least version 5.50.4522.1800 by examining
the Version string in the browser About box.
542 Troubleshooting