Implementing certificates in TrueSight Operations Management using scripts


Supported with 11.3.02 and later

  • The CLI commands to create and import certificates is supported only with:

    • TrueSight Presentation Server version 11.3.02 and later
    • TrueSight Infrastructure Management server version 11.3.02 and later
    • TrueSight Integration Service version 11.3.02 and later

    For other TrueSight Operation Management components, manually create and import signed certificates. For details, see Implementing private certificates in TrueSight Operations Management.

Security certificates play a significant role in securing the TrueSight Operations Management environment. You must create and apply a security certificate on your server to initiate a secure session with the browsers. After a successful implementation of the security certificate, you can observe that the HTTP changes to HTTPS format on your browser address bar, as shown in the following screenshot:

tls_cert_illustration.png

Deploying signed certificates in TrueSight Operations Management environment involves tasks such as creating a private key pair, generating a certificate signing request (CSR), sending the CSR to the Certificate Authority (CA) of your organization for signing, and importing the signed certificates into the component's keystores/truststores. Presentation Server and the Infrastructure Management server provides set of CLI commands that helps you as an administrator to deploy certificates easily and quickly. 

The following procedures guide you to create and import certificates for the following TrueSight Operations Management components using the CLI commands:

Component

For detailed steps, see:

TrueSight Presentation Server

Using the tssh certificate command, you can:

  • Create and secure Presentation Server
  • Import the following component certificates into the Presentation Server truststore:
    • IT Data Analytics
    • Remedy Single Sign-On
    • Bladelogic
    • Infrastructure Management Server
    • Remedy Application Request Change Management System

For details, see Create and import signed certificates in TrueSight Presentation Server

TrueSight Infrastructure Management Server

Using the pw certificate command, you can:

  • Create and secure Infrastructure Management Server
  • Import the following component certificates into the Infrastructure Management Server truststore:
    • Presentation Server
    • Integration Service
    • BMC Service Resolution

For details, see Create and import signed certificates in TrueSight Infrastructure Management Server

TrueSight Integration Service

Using the pw certificate command, you can import the Presentation Server certificate into the Integration Service truststore. For details, see Importing-certificates-in-TrueSight-Integration-Service

Where to go from here

Manually create and import signed certificates for the other TrueSight Operations Management components. For details, see Implementing-private-certificates-in-TrueSight-Operations-Management.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*