ServerView Resource Orchestrator Cloud Edition V3.2.0 Setup Guide

C.6.2 Registering CA Certificates of ServerView Operations Manager

When performing authentication using Single Sign-On, use the following procedure to register CA certificates with Resource Orchestrator.

1. Stop the manager.

   Execute the rcxadm mgrctl stop command and stop the manager.

   For details on the rcxadm mgrctl stop command, refer to "5.14 rcxadm mgrctl" in the "Reference Guide (Command/XML) CE".

2. Check the content of the CA certificate for updating.

   >rcxadm authctl diffcert

   The difference of the CA certificate (keystore) of ServerView Operations Manager and the registered CA certificate (keystore) of Resource Orchestrator is displayed.
   When difference is displayed, perform step 3. When difference is not displayed, perform step 5.

   Example

   [Windows Manager]

   >C:\Fujitsu\ROR\SVROR\Manager\bin\rcxadm authctl diffcert
   svs_cms
   ldaphost.fujitsu.com

   [Linux Manager]

   # /opt/FJSVrcvmr/bin/rcxadm authctl diffcert
   svs_cms
   ldaphost.fujitsu.com

3. Update the CA certificate.

   Execute the following commands.

   >rcxadm authctl refreshcert -alias alias

   Specify the alias of the certificate displayed when checking certificates as alias.

   When importing two or more certificates to Resource Orchestrator, repeat this procedure for each certificate.

   Example

   [Windows Manager]

   >C:\Fujitsu\ROR\SVROR\Manager\bin\rcxadm authctl refreshcert -alias svs_cms

   [Linux Manager]

   # /opt/FJSVrcvmr/bin/rcxadm authctl refreshcert -alias svs_cms

4. Check the difference of the CA certificate.

   Perform step 2 again, and check that the updated certificate is not displayed.

5. Start the manager.

   Execute the rcxadm mgrctl start command and start the manager.

   For details on the rcxadm mgrctl start command, refer to "5.14 rcxadm mgrctl" in the "Reference Guide (Command/XML) CE".