Management HTTP Server First Time Initialization

After a product that uses the Management HTTP Server has been installed and configured, there are a few items that will occur the first time the Management HTTP Server is run. Upon initialization, the Management HTTP Server will create a private key and a corresponding self-signed base64 encoded Certificate. This does not occur every time that the Management HTTP Server is started, just the first time that it ever runs. This certificate is a base64 encoded PEM file. The certificate is stored on the file system as \Compaq\wbem\cert.pem. The \Compaq\wbem subdirectory also contains the private key and in order to protect the key, this subdirectory will only be accessible to administrators if the file system allows it. For private key security reasons, it is highly recommended that the Management HTTP Server be run on NTFS systems.

For Windows operating systems, the \compaq\wbem subdirectory must exist on an NTFS file system in order for the private key to have administrator-only access through the file.

If for any reason you feel that the private key has been compromised, and a new private key and certificate should be generated, the administrator can delete the \compaq\wbem\cert.pem file and then restart the server. This will cause the Management HTTP Server to generate a new certificate and private key.

Related Topic

Pre-Installation and Minimum Requirements