HP RISS Components Available certificate signing requests, Creating a certificate signing request

Available certificate signing requests

Table 22 Available certificate signing requests (CSRs) in the RISS system

Feature	Description
Machine Type	The host for which the CSR has been generated. The host is either a
	PCC or HTTP portal.
Virtual IP	The virtual IP address of the host.
Creation Date	The date the CSR was created.
Path	The path to the CSR. The CSR files are always placed on the PCC host.

Creating a certificate signing request

To create a certificate signing request (CSR):

1.Complete the form at the bottom of the SSL Configuration view.

You can create only two types of CSR files: one for access to the PCC, and one for access to the HTTP portal machines.

2.Click Generate CSR.

To install a certificate on the PCC portal, see "Installing a third party certificate on the PCC portal" on page 40.

To install a certificate on each HTTP portal, see "Installing a third party certificate on the HTTP portals" on page 40.

NOTE:

If you enter incorrect information in the form and need to generate a new CSR, see "Deleting a certificate signing request" on page 39 for the procedure to follow.

Deleting a certificate signing request

After a certificate signing request (CSR) is generated for the PCC or HTTP portals, it cannot be regenerated. If you have entered incorrect information in the certificate request, the file must be manually deleted before you can create a new CSR in the SSL Configuration view.

To delete a CSR:

1.Log in to the PCC console.

2.Go to /opt/keys and delete the CSR with one of the following commands: rm -f pccCert.pem (to remove the PCC certificate request)

rm -f httpCert.pem (to remove the HTTP certificate request)

3.Upon deleting pccCert.pem and/or httpCert.pem in directory /opt/keys, log off or close the PCC UI. If you do not, refreshing the PCC UI will re-create these files, and the <SSL Configuration> page will not allow new CSRs be created.

NOTE:

Important! Do not delete the private key files (pcckey.pem or httpkey.pem).

Administrator Guide 39