Hitachi VSP Gx00 series User Manual

3. In the folder wher
e the .bat le is located, execute the following command:
C:\MAPP\wk\Supervisor\MappIniSet>MappApacheCrtUpdate.bat
absolute-path-of-signed-public-key-certification-file absolute-
path-of-private-key-file
Note:
A space is r
equired between MappApacheCrtUpdate.bat and the signed
public key certication le path.
A space is required between the signed public key certication le path
and the private key le path.
4. A completion message box displays. Press any key to acknowledge the message and
close the message box.
5. Close the command prompt window.
Notes on updating a signed certificate for the service processor
The following notes provide additional information about updating a signed certicate.
■
While the service pr
ocessor certicate is being updated, tasks that are being run or
scheduled to run on
Device Manager - Storage Navigator are not executed.
■
Certicates for RMI communication are updated asynchronously. The process takes
about two minutes.
■
If the service processor certicate is updated while Hitachi Command Suite is being
set up, the setup operation will fail.
■
Updating the SSL certicate might change the system drastically and may lead to
service processor failure. Therefore take sucient care to consider the content of the
certicate and private key to be set.
■
After the certicate update is complete, depending on the environment, the service
processor can take 30 to 60 minutes to restart.
Returning the certificate to default
You can return the certicate that was updated by the procedure in
Updating a signed
certicate (on page 151) back to default.
Befor
e you begin
■
You must have the Storage Administrator (Initial Conguration) role to perform this
task.
■
You must be logged into the SVP.
■
A private key (.key le) has been created. Make sure that the le name is server.key.
See
Creating a private key (on page 147) .
■
The passphr
ase for the private key (server.key le) is released.
■
A signed public key certicate (.crt le) has been acquired. Make sure that the le
name is server.crt. See
Creating a public key (on page 148) .
■
The private k
ey (.key le) must be in PEM format. You cannot use DER format.
■
The signed public key certicate (.crt le) must be in X509 PEM format. You cannot use
X509 DER format. See
Obtaining a self-signed certicate (on page 149) .
Notes on updating a signed certicate for the service processor
Chapter 5: Setting up security
System Administrator Guide for VSP Gx00 models and VSP Fx00 models 152

Hitachi VSP Gx00 series Specifications

General

Brand	Hitachi
Model	VSP Gx00 series
Category	Storage
Language	English