Specifying the URL of the OCSP Responder

Optionally, you can specify the URL of the OCSP responder as follows:

  1. Edit the following file:

    Windows: %NnmDataDir%\nmsas\NNM\conf\nms-auth-config.xml

    Linux: $NnmDataDir/nmsas/NNM/conf/nms-auth-config.xml

  2. Within the <ocsp> section of the file (find the <ocsp> tag), search for the line that begins with the following text:

    <responder>
  3. Edit the line to read as follows:

    <responder><URL></responder>

    where <URL> is the URL associated with the OCSP responder.

  4. Save the nms-auth-config.xml file.
  5. Run the following command for the change to take effect:

    nnmsecurity.ovpl -reloadAuthConfig

Note The OCSP URL must use the HTTP protocol.

  • If there is no OCSP URL specified in the nms-auth-config.xml file, NNMi attempts to obtain an OCSP responder from the certificate itself.
  • If there is no OCSP responder specified in the certificate, NNMi uses the <mode> setting to determine what action to take:
    • If the mode is ENFORCE or ATTEMPT, NNMi passes the OCSP validation step for this certificate.

    • If the mode is REQUIRE, NNMi rejects the certificate.