PowerProtect Data Manager 19.9 Administration and User Guide

Change the vCenter server FQDN

When the FQDN of the vCenter server changes, its new SSL certificate must be imported into the PowerProtect Data Manager trust store.

1. Get the current information from the vCenter server, and make a note of the value of id, which corresponds to the new FQDN certificate:
   GET https://192.168.1.204:8443/api/v2/certificates?host=a022-renamed.ppdm.vmware.com&port=443&type=Host

   For example, the output might look like this:

   fingerprint: "43FF8FBA82D1DD68E630AE9DB8BA7DF21549CE39"
   host: " a022-renamed-ppdm.vmware.com"
   id: "dmNlbnRlci12bWRtLTA0LmFzbC5sYWIuZW1jLmNvbTo0NDM6aG9zdA=="
   issuerName: "OU=VMware Engineering, O= a022-renamed-ppdm.vmware.com, ST=California, C=US, DC=local, DC=vsphere, CN=CA"
   notValidAfter: "Mon Mar 11 17:39:09 PDT 2030"
   notValidBefore: "Mon Mar 16 17:39:09 PDT 2020"
   port: "443"
   state: "UNKNOWN"
   subjectName: "C=US, CN=vcenter-vmdm-04.asl.lab.emc.com"
   type: "HOST"

2. Import the new certificate into the PowerProtect Data Manager trust store:
   PUT https://192.168.1.204:8443/api/v2/certificates/{newCertID}

   Replace {newCertID} with the value of id displayed in step 1. Only use the text that was displayed between the quotation marks.

3. Get the ID of the vCenter server:
   GET https://192.168.1.204:8443/api/v2/inventory-sources/

   All vCenter servers that are configured in PowerProtect Data Manager are displayed.

   For example, the output might look like this:

   "id": "6ffdb6e9-b864-56f4-8ec8-fe1c214c6fef",
   
               "name": "VC",
   
               "version": "7.0.2",
   
               "type": "VCENTER",
   
               "lastDiscovered": "2021-08-10T07:03:41.624Z",
   
               "lastDiscoveryResult": {
   
                   "status": "OK",

4. Record the new FQDN of the vCenter server in PowerProtect Data Manager:
   PUT https://192.168.1.204:8443/api/v2/inventory-sources/{vCenter-id}

   Replace {vCenter-id} with the value of id displayed for the vCenter in step 3. Only use the text that was displayed between the quotation marks.

5. Get the current list of certificates:
   GET https://192.168.1.204:8443/api/v2/certificates
   Both the old and new FQDN certificates are displayed. There might also be additional certificates displayed.
6. Search the certificate entries displayed in step 5, and locate the entry where the value of host matches the old FQDN of the vCenter server. Make a note of the corresponding id value.
7. Delete the old certificate from the PowerProtect Data Manager :
   DELETE https://192.168.1.204:8443/api/v2/certificates/{oldCertID}

   Replace {oldCertID} with the value of id noted in step 6. Only use the text that was displayed between the quotation marks.