8.6 Configuring the global network management feature to use self-signed certificates

During NNMi installation, the installation script creates a self-signed certificate for the NNMi management server. This certificate contains an alias that includes the fully-qualified domain name of the node. The installation script adds this self-signed certificate to the NNMi management server's nnm.keystore and nnm.truststore files.

Suppose you want your global network management configuration to model the following figure.

Figure 8‒4: Global network management

Complete the steps below to configure the global network management feature to use self-signed certificates based on the above figure.

Change to the following directory on regional1 and regional2 before completing step 2:
- Windows: %NNM_DATA%\shared\nnm\certificates
- UNIX: $NNM_DATA/shared/nnm/certificates
Copy the nnm.truststore files from the above locations on regional1 and regional2 to some temporary location on global1.
Execute the following commands on global1 to merge the regional1 and regional2 certificates into global1's nnm.truststore file:

nnmcertmerge.ovpl -truststore regional1-nnm.truststore-location

nnmcertmerge.ovpl -truststore regional2-nnm.truststore-location
Execute the following command sequence on global1:
```
ovstop
ovstart
```

To Page Top