Notes On Updating The Signed Certificate To The Svp; Creating A Keypair - HPE XP P9000 User Manual

Notes on updating the signed certificate to the SVP

Read the following notes about uploading the signed certificate to the SVP:
• While the SVP certificate is being updated, tasks that are being executed or scheduled for execution
on Remote Web Console are not executed.
• Certificates for RMI communication are updated asynchronously (within approximately two minutes).
• If an SVP certificate is updated during Command View Advanced Edition setup operation, the
Command View Advanced Edition setup operation will result in an error
• Update of the SSL certificate gives a great influence to the system and may lead to SVP failure.
Therefore take sufficient care about the content of the certificate and private key to be set.
• Depending on the environment, the SVP web server restart may require 30 to 60 minutes after update
of the certificate is completed. In that case, an internal server error occurs, and even after completion
of the restart, the update completion dialog box for Update Certificate Files does not display, but the
update of the certificate is complete.

Creating a keypair

To enable SSL, you must create a keypair consisting of a public and a private key. The instructions use
Windows XP as an example.
If you are using Solaris, download software for creating an OpenSSL keypair (http://www.openssl.org/)
and follow the manufacturer's instructions.
Creating a private key (.key file)
A private key is required to create an SSL keypair. The following procedure is for the Windows Vista
operating system.
To create a private key (.key file) in a Windows Vista environment:
Prerequisites
Before you begin, download openssl.exe from the OpenSSL Website.
Procedure
1. If the read-only attribute is set, release it from the c:\key folder.
2. Open a command prompt.
3. Move the current directory to the folder to which the key file is output (such as c:\keyl), and execute
the following command:
c:\key > c:\openssl\bin\openssl genrsa -out server.key 1024
This procedure creates a file called server.key in the c:\key folder. This file becomes the private Key.
Creating a public key (.csr file)
A public key is required to create an SSL keypair. The following procedure is for the Windows Vista
operating system.
To create a public key in a Windows Vista environment:
Setting up Remote Web Console 15