- Notes, cautions, and warnings
- Preface
- Introduction
- Authentication
- Component access control
- Login security settings
- Authentication types and setup
- Managing identity providers
- Troubleshooting LDAP configuration issues
- User and credential management
- Authentication to external systems
- Authorization
- Log Settings
- Network and Communication Security Settings
- Data Security Settings
- Cryptography
- Security certificates
- Certificate management
- REST API Procedures
PowerProtect Data Manager 19.9 Security Configuration Guide
Certificate management
The following topics describe how to replace the default self-signed security certificates for PowerProtect Data Manager with certificates from an approved CA. You can replace the certificates for the UI server and the REST API.
If you have added any vCenter servers, reinstall the PowerProtect plug-in after you replace the security certificates. Reinstall the PowerProtect plug-in for the vSphere client provides more information.
Regardless of the method that you select, if the UI continues to present the default self-signed security certificates, Restart the web service provides instructions.
Prerequisites
The new host certificate must:
- Contain the PowerProtect Data Manager server fully qualified domain name in the Subject Common Name (CN) and Subject Alternative Name (SAN) fields.
- Not contain the PowerProtect Data Manager server IP address in the SAN field.
Complete the steps in Certificate replacement prerequisites.
UI method
Providing security certificates over HTTPS is secure enough for most environments. Where additional precautions are required, use the manual method to replace the certificates.
Replacing the security certificates through the PowerProtect Data Manager UI requires a private certificate in PKCS#1 (RSA) PEM format and a public certificate chain in PEM format.
CLI method
The CLI method requires a private key in PKCS#1 (RSA) PEM format and a public certificate chain in PEM format. Use a secure method to transfer the certificates and keys to the PowerProtect Data Manager server.
Complete Replace security certificates with the CLI tool. Appendix REST API Procedures describes alternative ways for advanced users to manually replace the security certificates.
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\