Searching the Help
To search for information in the Help, type a word or phrase in the Search box. When you enter a group of words, OR is inferred. You can use Boolean operators to refine your search.
Results returned are case insensitive. However, results ranking takes case into account and assigns higher scores to case matches. Therefore, a search for "cats" followed by a search for "Cats" would return the same number of Help topics, but the order in which the topics are listed would be different.
Search for | Example | Results |
---|---|---|
A single word | cat
|
Topics that contain the word "cat". You will also find its grammatical variations, such as "cats". |
A phrase. You can specify that the search results contain a specific phrase. |
"cat food" (quotation marks) |
Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase. |
Search for | Operator | Example |
---|---|---|
Two or more words in the same topic |
|
|
Either word in a topic |
|
|
Topics that do not contain a specific word or phrase |
|
|
Topics that contain one string and do not contain another | ^ (caret) |
cat ^ mouse
|
A combination of search types | ( ) parentheses |
|
Configure TLS for OMi
The OMi configuration wizard enables you to configure TLS in OMi so that OMi accepts only HTTPS connections to the web server and JMX console.
If your company uses a Certificate Authority (CA) that can generate certificates for OMi, you can upload these certificates using the configuration wizard. See also Obtain server certificates from a CA. Alternatively, you can let OMi generate the certificates required for the configuration.
Note For a maximum level of security, HPE recommends to use certificates issued by the CA of your company.
If you choose to use OMi-generated certificates, make sure to establish trust in the web browser from which you will log on to OMi. For details, see Establish trust in the browser.
To configure TLS for OMi, complete the following steps when configuring OMi. You can set up TLS when you configure OMi for the first time or any time after the first configuration. TLS with OMi-generated certificates is selected by default in the configuration wizard.
-
Start the OMi configuration wizard:
<OMi_HOME>/bin/config-server-wizard.[bat|sh]
-
Proceed through the wizard. In the TLS Setup page, make sure Enable HTTPS is selected.
-
Select the origin of the certificates required for the TLS setup and then click Next:
-
Upload certificates. Recommended. In the Certificate Upload page, specify the certificates you received from the CA used by your company:
-
Specify the server certificate issued for the server you are currently configuring. The uploaded file must include both the certificate and private key and must be in .p12 or .pfx format.
Enter the password for the .p12 or .pfx file.
-
Specify the CA root certificate.
-
Optional. Specify the certificate chain if the server certificate was issued by a subordinate CA. The certificate file must be PEM-encoded. Click Clear to remove the selected file.
-
-
OMi-generated certificates. In the OMi Certificate Generation page, you can customize the key options and contents of the certificates generated by the OMi CA. You can define certificate settings for the OMi root CA and for the OMi server for which the certificate is issued:
Key length. Size of the RSA key.
Certificate validity (days). Time period after which the issued certificates will expire.
Organization. Legal name of your business or organization.
Country. Country where your business is registered with the government.
Common name. Name of the OMi CA that issues the certificates.
-
-
If you are configuring OMi for the first time, do not yet configure client certificate authentication. See How to configure client certificate or smart card authentication for details.
Complete the remaining wizard pages and then import the CA certificate to your web browser as described in Establish trust in the browser.
If you choose to Upload certificates, three certificate types can be uploaded in the OMi configuration wizard:
the server certificate, the CA root certificate and the intermediate CA certificate.
If you have one CA root certificate and one intermediate CA certificate from the same certificate authority, it suffices to only upload the intermediate CA certificate. If you have one CA root certificate and two or more intermediate CA certificates from the same or from different certificate authorities, a valid certificate chain has to be uploaded.
The intermediate CA certificate chain must contain all intermediate CA certificates in a single .PEM
file. Add the CA certificates in the reversed order in which they are issued: start with the intermediate CA certificate that issued the server certificate and end with the intermediate CA certificate that was issued by the CA root certificate.
To create the certificate chain, open a local notepad application. Copy and paste the single PEM
-encoded certificates in the order defined above and save the certificate chain file in the .PEM
format.
Example:
You have one CA root certificate, one server certificate, and two intermediate CA certificates.
The resulting .PEM
file contains the intermediate CA certificates in the reversed order in which they were issued: first the intermediate CA certificate 2, followed by the intermediate CA certificate 1:
-----BEGIN CERTIFICATE----- <Intermediate CA certificate 2> -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- <Intermediate CA certificate 1> -----END CERTIFICATE-----
We welcome your comments!
To open the configured email client on this computer, open an email window.
Otherwise, copy the information below to a web mail client, and send this email to ovdoc-asm@hpe.com.
Help Topic ID:
Product:
Topic Title:
Feedback: