Hitachi Compute Blade 2000, User Manual

Page: 1418 / 1927

1367
12
Log
ical
par
titio
ni
ng man
age
r

Server certificate parameters
The following table describes parameters of LPAR manager server certificates.
Item Description
Public key algorithm,
bit- length
RSA (2048 bits)
Importable certificate
format
PEM/DER
Certificate format in
downloading
DER
Executable CSR
format
PEM/DER
Subject information
usable in a certificate
and CSR
Common name (CN): Up to 60 characters (*1, *2)
Country (C): Up to 2 characters (*3)
State or province (ST): Up to 60 characters (*4)
Locality (L): Up to 60 characters (*4)
Organization name: Up to 60 characters (*4)
Organization unit (OU): Up to 60 characters (*4)
Mail address: Up to 60 characters (*5)
Domain name (DN) qualifier: Up to 60 characters (*4)
Surname: Up to 60 characters (*4)
Given name: Up to 60 characters (*4)
Initials: Up to 30 characters (*4)
Unstructured name: Up to 60 characters (*4, *6)
Challenge password: Up to 30 characters (*4, *6)
*1 Required item.
*2 Alphanumerical characters, hyphones (-) and period (.) can be used for this
item.
*3 Uppercase alphabetic characters can be used.
*4 Alphanumerical characters, hyphones (-), periods (.), pluses (+), single
quotations (‘), commas (,), left parentheses ((), right parentheses ()), slashes (/),
colons (:), equals (=), question marks (?), and spaces can be used for this item.
*5 Printable ASCII characters can be used.
*6 This can be filled in when CSR is created.

Creating LPAR manager server certificate
To create a self-signed certificate:
A self-signed certificate is automatically created at the LPAR manager first boot.
When re-creating one, use the “opr HvmServerCertificate” command.
Make sure that a unique common name (CN) is set in the subject information for a
self-signed certificate per LPAR manager.
To obtain a created self-signed certificate, use the “get HvmServerCertificate”
command.
Use the “opr HvmSecureCmmConfigSave” command to save the LPAR manager
configuration information before shutting down or rebooting the LPAR manager
after creating a self-signed certificate.