Post-Installation Tasks; Enabling Ssl For The Policy Server; Configuring The Policy Sever For Ssl By Using A Self-Signed Certificate - HP 3PAR StoreServ 7200 2-node Installation And Setup Manual
Hp 3par policy server installation and setup guide (qr483-96004, december 2012)
Hide thumbs
Also See for 3PAR StoreServ 7200 2-node:
- Administrator's manual (204 pages) ,
- Manual (107 pages) ,
- Service manual (66 pages)
Table of Contents
5 Post-Installation Tasks
To complete the HP 3PAR Policy Server installation, you must take additional steps before the Policy
Server can be used by a Service Processor. The following tasks must be completed before you
configure a Service Processor to use this Policy Server:
Enable SSL for the Policy Server.
Update the Policy Server policies.
Enabling SSL for the Policy Server
The Service Processor (SP) communicates with the HP 3PAR Policy Server over SSL. In order to do
this, the Policy Server must be configured to have an SSL certificate.
The following section describes how to use a self-signed certificate to configure the Policy Server
for SSL. You can also use an existing certificate infrastructure (such as VeriSign or Microsoft
Certificate Services). For more information about how to do this, see
for SSL by Using an Existing Certificate Infrastructure " (page
Configuring the Policy Sever for SSL by Using a Self-Signed Certificate
A self-signed certificate can be created by using the keytool command that is included with the
Java Runtime Environment (JRE). To do this, follow these steps:
1.
On the Windows server that is running Policy Server, open a command prompt.
2.
Create the directory in which to store the keystore file (this is the same path you entered when
you installed the Policy Server):
C:\>mkdir c:\hp-3par
3.
Change to the directory where the keytool command exists:
C:\> cd C:\Program Files (x86)\HP 3PAR\PolicyServer\jre\bin
4.
Execute the keytool
during the Policy Server installation:
C:\Program Files (x86)\HP 3PAR\PolicyServer\jre\bin>keytool -genkey -keyalg RSA
-alias tomcat -keyalg RSA -keysize 1048 -keystore c:\hp-3par\keystore-ps
Enter keystore password:
Re-enter new password:
What is your first and last name?
[Unknown]:
What is the name of your organizational unit?
[Unknown]:
What is the name of your organization?
[Unknown]:
What is the name of your City or Locality?
[Unknown]:
What is the name of your State or Province?
[Unknown]:
What is the two-letter country code for this unit?
[Unknown]:
Is CN=127.0.0.1, OU=HP, O=3par, L=roseville, ST=ca, C=us correct?
[no]:
Enter key password for
genkey command using the keystore file and password entered
127.0.0.1
HP
3par
roseville
ca
us
yes
(RETURN if same as keystore password):
"Configuring the Policy Sever
30).
Enabling SSL for the Policy Server
17
Hide quick links:
Table of Contents
