HP Insight Control - Manual (Page 22)

6. For each target server, perform these steps:
1.
Select the certificate.
2. Click Export... to launch the Certificate Export Wizard.
3. Click Next to continue. The Export File Format dialog is displayed.
4. Enter a filename along with the complete path of the directory. For example,
C:\VMHost-Certs\servername.cer
NOTE: If you do not enter the complete path, the certificate gets stored in your
Documents and Settings folder.
5. Click Next to continue with the export. A Completing the Certificate Export Wizard
page is displayed, summarizing the information about the certificate.
Import the Host/vCenter certificates into the VMM keystore
Import the host /vCenter certificates exported to a local directory to the VMM keystore using
the -importVmHostCertToVMMKeystore command from the VMM cli.
To import the Host/vCenter certificates into the VMM keystore, perform these steps:
1.
Locate the CA certificate.
2. From the command prompt, run the following command:
vmcli importServerCertToVMMKeystore
path>
where, is the location of the certificate
and is the IP address or host name of
the server containing the certificate.
3. Restart the VMM service.
3. Insight Control virtual machine management logs all user operations to custom log files located
at \logs . For Windows CMS, you can log these events to the
Windows events log file. For more information, see
“Task: Logging VMM logs into Windows
NT Events” (page 22) .
NOTE: If you log VMM events to the Windows events log file, this will increase the number
of Windows events and size of Windows log file. You can perform this step only if needed,
as this would require more disk space.
Enabling certificate validation and Certificate Revocation List (CRL) validation
HP Insight Control virtual machine management supports certificate and CRL validation. The status
of the certificates issued by a Certificate Authority (CA) must be determined to avoid certificate
revocation. In the absence of such validity checks, there is a possibility that the application accepts
credentials, which were earlier revoked by a CA administrator. VMM uses CRL to represent the
revocation information. The revoked certificates are published in the CRL.
To enable certificate validation, add the flag EnableHostCertValidation, and set it to True in the
hpvmm.conf
found at the following location.
/bin/hpvmm.conf
To enable CRL validation, add the flag EnableCRLValidation, and set it to True in the hpvmm.conf.
Then restart the VMM service.
NOTE: Before enabling the CRL validation, enable the certificate validation.
Task: Logging VMM logs into Windows NT Events
To log VMM logs into Windows NT Events, perform the following:
22 Managing virtual machines