Overview

Due to security updates, HP has updated the authentication method of HPDM HTTPs Server from MD5 digest to SHA256 digest in HPDM 5.0.11.

As a result of this update, HPDM 5.0.9 and prior Agents might not be able to support SHA256 digest, because the libcurl libraries in the Agent packages are too old. This causes 5.0.9 or prior agents to be unable to upgrade to 5.0.11 or later via the HTTPS protocol.

Potential Issue

When users upgrade HPDM Agents from 5.0.9 or prior with 5.0.11 or later HPDM Server environment via the HTTPs protocol, they might encounter a File Transfer error.

The Error Details indicates that the HttpClient failed to login the HTTPs Server

Solutions

There are 2 solutions to resolve this issue:

• Add another File Transfer Protocol in the HPDM Repository
  • Establish a different type of file server on the PC where HPDM is installed.
  • Modify the repository settings within HPDM Console.
• Install a child repository using HPDM 5.0.10 HTTPS Server.
  • It requires another PC or virtual PC.

Note: These two solutions can also upgrade 5.0.9 and prior HPDM Gateways.

Add another File Transfer Protocol

HPDM supports the following file transfer protocols: HTTPS, FTP/FTPS, SFTP, and SMB (Shared Folder). You can use a single protocol or multiple protocols in one repository. By default, after installing HPDM, the installer automatically generates a master repository and configures it with the HTTPS protocol. The HTTPS protocol points to the built-in HPDM HTTPS Server. The default HPDM repository path is “C:\ProgramData\HP\HP Device Manager\HPDM”. The HPDM repository path can be modified via the HPDM Master Repository Controller page of HPDM Configuration Center.

You can modify the repository settings within HPDM Console after you setup a different type of file server.

Establisth a File Server

1. FTP/FTPS: Please refer to the FTP Repositories section in the HPDM Admin Guide for setting up an FTP/FTPS server.
2. SMB (Shared Folder): Set the HPDM Repository directory as an SMB shared folder with full control permissions.
3. SFTP: Install a proper SFTP server and follow its guide to configure the HPDM Repository folder as the root folder.

Modifying Repository settings within HPDM Console

1. Open HPDM Console to add the FTP setting into Master Repository.
   1. Go to the Gateways & Repositories page of HPDM Console.
   2. Select the repositories in the Navigator pane.
   3. Select the Repository you want to modify.
   4. Follow the Repository Configuration Wizard to modify settings:
      1. In the Basic Information page, you can change the Repository Name and the Server address.
      2. In the Protocol Settings page, you can add or remove file transfer protocols.
      3. Enable the protocol that the new file server used and configure it.
      4. In the last Summary page, select the Test Repository button. The test report is output in the Test Result pane.
      5. If the test is successful, select Finish to save the changes. If the test in not successful, modify the settings and test
         again.

Install a child repository using HPDM 5.0.10 HTTPS Server

This approach is for customers with additional PCs or virtual machines who prefer to update agents using HTTPS. 

1. Copy the HPDM 5.0.10 installer or the HPDMHTTPSRepository.exe (extracted from HPDM 5.0.10 installer, it
   locates at the C:\SWSetup\HP Device Manager 5.0) to another PC.
2. Execute the installer or the HPDMHTTPSRepository.exe to install it.
3. Add the new HTTPS server as a child repository in the HPDM Console.
4. Edit the Mapping Policy to assign the child repository to the corresponding HPDM Gateway or subnet.
5. Send the Update Agent task to upgrade 5.0.9 and prior Agents to 5.0.10 or later.
6. Restore the Mapping Policy and remove the child repository

Download HPDM 5.0 SP10: https://ftp.hp.com/pub/softpaq/sp147001-147500/sp147318.exe

Read the full whitepaper on: https://www8.hp.com/h20195/v2/GetDocument.aspx?docname=c08884363