For a TLS connection between Session Manager and System Manager, the system validates the identity certificate using standard path validation, which complies with the RFC5280 section Certificate Path Validation. In addition, the system performs hostname validation.
The System Manager identity certificate must have a Subject Alternate Name extension with the following DNS name entries:
The first DNS entry must contain the actual System Manager hostname, for instance, systemmanager-1.example.com.
The second DNS entry must contain the active.smgr.com value. The hostname active.smgr.com is used because Data Replication) uses this hostname for certificate validation.
