Hitachi Compute Blade 500 Series User Manual page 90

LPAR manager certificates
When the other system tries to connect to LPAR manager over TLS, the LPAR
manager certificate is sent to the other system. The other system can
authenticate the LPAR manager by verifying the server certificate.
• LPAR manager server certificates
LPAR manager can use self signed certificates or certificates signed by a
certificate authority (CA) as the LPAR manager server certificate. When
the other system authenticates LPAR manager by verifying the LPAR
manager server certificate, register the server certificate to the other
system. For registration, see the other system's user's guide. It may take
about 30 seconds before a registered certificate is enabled, while
connection to LPAR manager may be unavailable for that period.
• Systems for LPAR manager server certificates
The following systems can use LPAR manager server certificates.
– HCSM (Hitachi Compute Systems Manager)
– HvmSh
• Server certificate parameters The following table describes parameters of
LPAR manager server certificates.
Public key algorithm, bit- length
Importable certificate format
Certificate format in downloading
Executable CSR format
Subject information usable in a certificate
and CSR
2-18
Hitachi Compute Blade 500 Series Logical partitioning manager User's Guide
Table 2-10 Parameters of LPAR manager server certificates
Item
System Operation
Description
RSA (2048 bits)
PEM/DER
DER
PEM/DER
Common name (CN): Up to 60
1, 2
characters
Country (C): Up to 2 characters
State or province (ST): Up to 60
4
characters
3