Administer > Configure communication protocol > Configure the default trusted certificates

Configure the default trusted certificates

[This is the Context-Sensitive Help topic for the Default Trusted Certificates tab on the Communication Configuration form.]

(NNMi Advanced) NNMi uses certificates to securely communicate with virtual machines running on hypervisors. By using the Default Trusted Certificates tab, you can upload trusted certificates that help NNMi create this secure communication channel. You can use one or more CA-signed certificates for this purpose.

By default, NNMi communicates with virtual machines running on hypervisors by using the HTTPS protocol. If your hypervisors are specifically configured to support HTTP communication, you can configure NNMi to use the HTTP protocol while communicating with virtual machines, and in that case, you do not need trusted certificates.

NNMi uses the following sequence to determine which certificate to use while communicating with virtual machines:

  • Use the Specific Node Trusted Certificates. If none match, continue.
  • Use the Region Trusted Certificates. If none match, continue.
  • Use the Default Trusted Certificate settings (provided here).

To upload the trusted certificate to the NNMi management server:

  1. Navigate to the Default Trusted Certificates tab.

    1. From the workspace navigation panel, select the  Configuration workspace.
    2. Select Communication Configuration.
    3. Navigate to the Default Trusted Certificates tab.
  2. Click Upload Certificate. The Open window appears.

  3. Select a file to upload the certificate to the NNMi management server, and then click Open. The certificate information appears in a table in the Default Trusted Certificates tab. You can upload multiple certificates.

    You can use only the following certificate formats:

    • .pem

    • .crt

    • .cer

    • .der

    If you upload multiple certificates at this tab, NNMi uses one out of all uploaded certificates to establish HTTPS connection with Web Agents.

    The table in the Default Trusted Certificates tab shows basic attributes of all uploaded certificates. To view additional information about each certificate, click the certificate in the table in this tab.

Default Trusted Certificate Attributes
Attribute

Description

Subject DN

The Subject Distinguished Name (Subject DN) of the certificate.

Valid From  The Valid From and Valid To values together define the validity period of the certificate.

 

Valid To

Related topics