Forgot... you will also need the SMHP on the machine in question to trust the SIM server.
You can either push out a certificate from within SIM (Configure > Configure or Repair Agents) or manually import it.
The certificate is held in C:\hp\sslshare\cert.pem on the SIM server.