PowerProtect Data Manager 19.9 Security Configuration Guide

Exchange the PowerProtect Data Manager security certificate with external components

While PowerProtect Data Manager maintains a certificate store for trusted external components, you can also exchange the server certificate with external components for greater protection.

PowerProtect Data Manager automatically presents the server certificate during the initial handshake when you connect to the server from an external component. The external component normally accepts and stores the server certificate for later use and authentication. No further action is required.

If the server certificate was not automatically presented or retained, you can get the certificate through the REST API. The PowerProtect Data Manager Public REST API documentation provides more information.

Use curl or a REST API client of your choice. An access token is not required. However, the REST API client may require an additional parameter to allow connections with servers that use self-signed certificates.

GET https://{{server}}:{{port}}/api/v2/jwks

The REST API service returns a status code and the server certificate:

200 OK
{
	"keys": [
		{
			"kty": "EC",
			"use": "sig",
			"crv": "P-256",
			"kid": "a86a7118-99f9-4768-bdda-8012474c8685",
			"x5c": [
				"MIIDBTCCAe2gAwIBAgIESvEK5DANBgkqhkiG",
				"MIIDizCCAnOgAwIBAgIEMayrSDANBgkqhkiG"
			],
			"x": "GdPBk9pB5VkppISLMHhKaQ5EIBsPeaoERgarTagRJko",
			"y": "QiVYHOUdiGPzCW8NvJifB5qVkShDcmsKd8F2g_zdGvE",
			"alg": "ES256"
		},
		{
			"kty": "RSA",
			"e": "AQAB",
			"use": "sig",
			"kid": "7452f2bb-3a83-4569-a0fc-7fe255284fb4",
			"alg": "RS256",
			"n": "jTgO5NHdgzLhkv619gjh5Uz07v8-ZFHtpsDT"
		}
	]
}

Some values in this example were truncated to fit the available space.