Storage Essentials: Self Signed SSL Certificate (65 Views)
Reply
Occasional Contributor
Andy Grimbleby
Posts: 4
Registered: ‎03-28-2006
Message 1 of 1 (65 Views)

Storage Essentials: Self Signed SSL Certificate

[ Edited ]

I have two installations of Storage Essentials 5.0.1 (with SIM 5.0sp4) using Oracle 9.2.0.6.0

The HP SIM & SE services are installed and configured on a machine with a FQDN of SANMAN1.uk.hps.com.

In order to provide a reasonable level of security, we wish to use self signed SSL certificates with HP SIM/SE. A new certificate has been successfully created for the SIM component by using the options: Options -> Security -> Certificates -> Server and installing a new correctly configured certificate. Now when accessing an HP SIM page, it can be seen that a correctly identified certificate is in place on this service.

When you connect to an SE page, a separate certificate is used. This according to the documentation should be created by using the following series of commands:

../StorageEssentials/tools/generateAppIQKeyStore del
../StorageEssentials/tools/generateAppIQKeyStore create SANMAN1.uk.hps.com
../StorageEssentials/tools/generateAppIQKeyStore copy

However, due to what seems to be a bug in this script, it only ever generates a key with the server name appiq.

This seems to be due to the inconsistent use of the variables $CERTIFICATENAME and $certificate_name where I suspect these should be one and the same.

Using a modified version of the script to correctly pass the FQDN to 'keytool' causes the AppStorService to enter the stopping state for reasons unknown.

Can anyone tell me the correct procedure for configuring this?

Thanks in advance.

-Andy

 

 

P.S. This thread has been moved from Storage Area Networks (SAN) (Enterprise) to Storage Essentials Support and News Forum. - Hp Forum MOderator

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.