Novell LINUX ENTERPRISE SERVER 10 SP2 - INSTALLATION AND ADMINISTRATION Installation Manual page 263

Certificates
Secure Socket Layers (SSL) transports require a certificate for secure communications
to occur. When OES is installed, OpenWBEM has a self-signed certificate generated
for it.
If desired, you can replace the path for the default certificate with a path to a commercial
certificate that you have purchased or with a different certificate that you have generated
in the http_server.SSL_cert = path_filename setting in the /etc/
openwbem/openwbem.conf file.
The default generated certificate is in the following location:
/etc/openwbem/servercert.pem
If you want to generate a new certificate, use the following command. Running this
command replaces the current certificate, so Novell recommends making a copy of the
old certificate before generating a new one.
As root in a console shell, enter
sh/etc/openwbem/owgencert
If you want to change the certificate that OpenWBEM uses, see Section 11.2.2,
"Changing the Certificate Configuration" (page 256).
Ports
OpenWBEM is configured by default to accept all communications through a secure
port, 5989. The following table explains the port communication setup and recommended
configuration.
Table 11.2 Port Communication Setup and Recommended Configurations
Port Type Notes and Recommendations
5989 Secure The secure port that OpenWBEM communications use via HTTPS
services.
This is the default configuration.
OpenWBEM 245