7 Creating a NonStop Software Essentials client certificate (using OpenSSL tools). Hewlett Packard Enterprise NonStop Software Essentials

7 Creating a NonStop Software Essentials client certificate

(using OpenSSL tools)

To configure an HTTPS client certificate:

1.

Export the key/certificate pair in pkcs12 format.

For example, set your directory to the OpenSSL sslshare directory, and then run the following command to create a key and certificate pair to be imported into a Java Key Store: openssl pkcs12 -inkey file.pem -in cert.pem -export -out jetty.pkcs12

openSSL asks for a non-empty password for creating a pkcs12 format key-store

(Remember this information, as it is required later.)

2.

Create a keystore that can be used by NonStop Software Essentials, and then run the keytool command to import the above pkcs12 keystore into the keystore.

CD to the folder where the jetty.pkcs12 file is generated, from the Step

Step 1

command: keytool -importkeystore -srckeystore jetty.pkcs12 -srcstoretype

PKCS12 –destkeystore keystore

Provide the password for the new keystore as storepwd when prompted for the storepwd password, and provide the source (pkcs12) keystore password designated in Step

Step 1 ,

when requested.

This action creates a keystore file.

3.

Stop the service NonStop Software Essentials from services.msc.

4.

Backup the keystore file in the C:\Program Files\HP\NonStop Software

Essentials\jetty\etc folder.

5.

Edit the start.ini file in the C:\Program Files\HP\NonStop Software

Essentials\jetty\ folder as follows: a.

If the jetty.keymanager.password, jetty.keystore.password or jetty.truststore.password

property has a # sign in front of it, remove it.

b.

Change the values of these three properties to

OBF:1vny1zlo1x8e1vnw1vn61x8g1zlu1vn4

.

6.

Start NonStop Software Essentials service from services.msc.

7.

Access NonStop Software Essentials.

23