Grant or deny certificate requests manually

Nodes that you manage with HTTPS agents require certificates. Certificates enable nodes to communicate securely with the management server and other nodes. Unless you install the certificates manually, a node requests the certificates from the management server. Before you can start to manage the node, you need to grant this certificate request.

You can view a table of the certificate requests that the management server has received, and manually grant or deny requests that are pending. Alternatively, you can grant or deny a pending certificate request from the command prompt.

To grant or deny certificate requests manually

1. In the console tree, click Certificate Requests. A table of certificate requests appears in the details pane.
2. Right-click a pending certificate request, and then click one of the following:
   • All TasksGrant - The management server send certificates to the node.
   • All TasksDeny - The management server informs the node that its certificate request is denied.
   • All TasksDiscard - The management server deletes the certificate request without informing the node.
3. If a confirmation message appears, read the message and then click OK or Cancel.

To grant certificate requests manually from the command prompt

1. Log in to the management server with an account that is a member of the HPOM administrators group. Open a command prompt.

2. Use ovowcsa -listpending to get a list of pending certificate requests. To obtain the list in a different format, add the -format option and any combination of the following letters:

   • r - request ID
   • h - host name
   • i - IP address
   • o - OvCoreID
   • m - mapped host name
   • p - platform
   • t - time received
   • s - show header line

3. Grant or deny a certificate request by specifying the request ID or host name with one of the following commands:

   • ovowcsa -grant <request ID | host name> - The management server send certificates to the node.
   • ovowcsa -deny <request ID | host name> - The management server informs the node that its certificate request is denied.
   • ovowcsa -discard <request ID | host name> - The management server deletes the certificate request without informing the node.