How to Use the HMC

After you send a CSR to a trusted third party (CA), you will receive a certificate signed by the CA (whether well-known or not well-known). The Issuer field of this certificate contains the information about the CA. The Subject field of this certificate contains the information that was in the CSR.

If the CA is not well-known, you may receive other CA certificates. These other CA certificates are needed to avoid remote users from receiving security warnings. Therefore, the owner of the HMC can use the Import function to import and install all the certificates received and the remote user must install the CA certificates in the browser's preconfigured list of trusted certificate authorities.

If the CA is a well-known CA (such as Verisign and Entrust), they are already on the browser's preconfigured list of trusted certificate authorities. Therefore, you only need to use the Import function to import and install the server certificate on the HMC.

To import and install a certificate:

1. In the Manage Certificates window, select Advanced, then select Import Certificate.
   
   If you are running from a remote browser, a window displays asking you if you want your certificate(s) imported from a removable media on the console or the file system on the system running the Web browser.
   
   If you are running from the HMC local console, the "Removable media on the console" choice is implicitly selected.

Import from a Removable Media on the Console

2. If the "Removable media on the console" choice is selected (either implicitly or explicitly), a window displays listing the removable media devices.
3. In the Removable Media window, select the device (Diskette Drive or DVD-RAM Drive) that contains the certificates you want to import and install.
4. Click OK. The File Selection window displays.
5. In the File Selection window, select the server certificate you want to import and install.
6. Click OK. Next, you are asked whether you want to import and install 0 or more CA certificates.
7. Make your selection and click OK. A window displays asking you whether you want to restart the HMC.
8. Click Yes to restart the HMC. The HMC is now operating with the new certificates installed.

Import from the File System on the System Running the Web Browser

2. If "The file system on the system running the browser" choice is selected, the Upload File window displays.
3. In the Upload File window, specify the name of the server certificate file or signing certificate files, if any, to import to the console. The file(s) specified must exist on the system running the browser. You can click Browse... to locate and select the certificate files to import and install. The file path now displays in the entry field.
4. Click OK to import and install the certificate files. A window displays asking you whether you want to restart the HMC.
5. Click Yes to restart the HMC. The HMC is now operating with the new certificates installed.