PowerProtect Data Manager 19.9 Security Configuration Guide

Virtual networks

Adding a virtual network creates a PowerProtect Data Manager interface on that virtual network. If you add a virtual network after you replace the default self-signed certificates, then the replacement certificates may not match the new interface. In this case, connections through the new interface can still produce a certificate warning even when the default interface does not.

To avoid this condition, install wildcard certificates for environments with virtual networks, and access the virtual network interfaces through FQDNs. For example, if the PowerProtect Data Manager server is ppdm.example.com, then:

• Name the virtual network interfaces using a subdomain pattern such as vlan-10.ppdm.example.com, vlan-20.ppdm.example.com, and so forth.
• Replace the default certificates with signed wildcard certificates for *.ppdm.example.com.
• Use the FQDN vlan-10.ppdm.example.com to access PowerProtect Data Manager from VLAN 10, and so forth.

Before you replace the security certificates, review the applicable limitations of wildcard certificates and requirements for Subject Alternative Names.