Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 11-05-2007 Installation Manual page 249

Certificates
Secure Socket Layers (SSL) transports require a certificate for secure communications
to occur. When OES is installed, OpenWBEM has a self-signed certificate generated
for it.
If desired, you can replace the path for the default certificate with a path to a commercial
certificate that you have purchased or with a different certificate that you have generated
in the http_server.SSL_cert = path_filename setting in the openwbem
.conf file.
The default generated certificate is in the following location:
/etc/openwbem/servercert.pem
If you want to generate a new certificate, use the following command. Running this
command replaces the current certificate, so Novell recommends making a copy of the
old certificate before generating a new one.
As root in a console shell, enter sh/etc/openwbem/owgencert.
If you want to change the certificate that OpenWBEM uses, see
"Changing the Certificate Configuration"
Ports
OpenWBEM is configured by default to accept all communications through a secure
port, 5989. The following table explains the port communication setup and recommended
configuration.
Table 11.2 Port Communication Setup and Recommended Configurations
Port Type Notes and Recommendations
5989 Secure The secure port that OpenWBEM communications use via HTTPS
services.
This is the default configuration.
(page 242).
Section 11.2.2,
OpenWBEM 231