HP MSM7xx Management And Configuration Manual page 390

Security
Working with certificates
Issued by
Name of the CA that issued the certificate.
Current usage
Lists the services that are currently using this certificate.
Delete
Select to remove the certificate from the certificate store.
Installing a new private key/public key certificate chain pair
Note
RADIUS EAP certificates must have the X.509 extensions. Information about this is available
in the Microsoft knowledgebase at:
http://support.microsoft.com/kb/814394/en-us
The certificate you install must:
 Be in PKCS #12 format.
 Contain a private key (a password controls access to the private key).
 Not have a name that is an IP address. The name should be a domain name containing at
least one dot. If you try to add a certificate with an invalid name, the default certificate is
restored.
The common name in the certificate is automatically assigned as the domain name of the
controller.
1. Specify the name of the certificate file or select Browse to choose one from a list.
Certificates must be in PKCS #7 format.
2. Specify the PKCS #12 password.
3. Select Install to install the certificate.
Default installed private key/public key certificate chains
The following private key/public key certificate chains are installed by default:
 wireless.hp.internal: Default certificate used by the management tool, SOAP server,
and HTML-based authentication.
 Dummy Server Certificate: Used by the internal RADIUS server. This certificate is
present only to allow EAP-PEAP to work if the client chooses not to verify the server's
certificate. You should replace this with your own certificate for maximum security.
 Management Default client certificate: This certificate is used to identify the
management tool when it communicates with HP PCM/PMM software.
12-8