UCMDB Support Tip: Issues Generating HTTPs Certificate
If you would like to create certificate to enable secured communication (UCMDB 10.01). And followed the guidelines listed under:
Plus the steps listed from page 18- 22 of the Hardening guide, and still not able to generate any certificate file.
In order to address such discrepancy, it is suggested to follow the steps from the Hardening guide with a few minor changes.
Step 1.b - It is suggested not to copy any JKS role in the mentioned folder.
Step 2.a - From C:\hp\UCMDB\UCMDBServer\bin\jre\bin, run the following command:
keytool -genkey -alias hpcert keystore C:\hp\UCMDB\UCMDBServer\conf\security\server.keystore
The console dialog box opens.
-Enter the keystore password. If the password has changed, run the changeKeystorePassword JMX operation, in UCMDB:service=Security Services. If the password has not changed, use the default hppass password.
-Answer the question, What is your first and last name? Enter the FQDN. Enter the other parameters according to your organization.
-When you are prompt to enter the password and for the second time- DO NOT DO IT. Just press enter. A JKS keystore is created named server.keystore with a server certificate named hpcert.
Step 2.b -Copied the created file on a device, add .cer on it plus in IE under: Tools -> Internet Options -> Content-> Certificates -> Select tab Trusted Root Certification Authorities -> Select Import and import the created certificate.
After all this restart the UCMDB server and enter https://FQDN:8443 then, you should able to login without any certificate issues.
If you find this or any post resolves your issue, please be sure to mark it as an accepted solution."
Click the KUDOS star on the left to say 'Thanks'