Managing Keys and Certificates

You can manage the keys and certificates of a Windows proxy. This certificate is used for securing communications between the appliance and the proxy. You can verify that the proxy communication has not been intercepted by comparing the certificate fingerprint shown in the appliance UI with the one shown in the Key And Certificate Management dialog of the Proxy Manager.

To generate a new key and certificate

From the Key and Certificate Management dialog, click Generate new key.
When prompted, confirm the action by clicking Yes.
Note
This operation resets communication with all appliances. You will need to register with these appliances again.

To install legacy key

To enable the Windows proxy to be used with BMC Discovery version 10.0 and earlier, switch the proxies to use the legacy key.

From the Key and Certificate Management dialog, click Install legacy key.
When prompted, confirm the action by clicking Yes.

Note

This operation resets communication with all appliances of version 10.1. You will need to register with these appliances again.

To switch from using legacy to unique keys

If the Windows proxy is currently using the legacy key and certificate, switch it to use unique keys.

From the Key and Certificate Management dialog, click Stop using legacy key.
When prompted, confirm the action by clicking Yes.

Note

Appliances running BMC Discovery version 10.1 and later will automatically start accepting the new certificate; older appliances will no longer be able to communicate.

To view keys and certificates

The Key and Certificate Management dialog displays Proxy SSL Key Fingerprint.
The Key and Certificate Management dialog displays Proxy CA Fingerprint.
From the Key and Certificate Management dialog, click Show Certificate.
The Certificate dialog displays the certificate in a portable format (pem) that might be used to manually transfer the certificate to the appliance.