Dell EMC Avamar for VMware 19.7 User Guide

Add vCenter authentication certificates to the MCS keystore

Configure vCenter-to-Avamar authentication by adding a vCenter authentication certificate to the MCS keystore. Perform this action for each vCenter that you intend to protect.

1. Log in to the Avamar AUI with Administrator privileges. Open a web browser and type the following URL:

   https://Avamar_server/aui

   Where Avamar_server is the DNS name or IP address of the Avamar server.

   NOTE:If your environment does not meet HTTPS certificate validation requirements, the certificate validation fails and an error message appears asking if you want to continue to download packages. Ignoring certificate validation might cause security issues.
   1. In the Avamar Username field, type a username with administrative privileges.
   2. In the Avamar Password field, type the password for the administrative user.
   3. Select Avamar as the Auth Type.
   4. Click Log In.
2. In the AUI navigation pane on the left, click , and then click Administration > System.
   The System window appears.
3. Select the Certificate tab, and then click +IMPORT CERTIFICATE under the Trust Certificate tab.
   The Import Certificate dialog box appears.

   NOTE:If the vCenter certificate and the Avamar web server certificate are issued by the same CA, you need not import the trusted certificates again for vCenter connection. To check Avamar web server certificate, check the Raw field in the private entry details of the Private Key tab.
4. Import the vCenter trust certificate by specifying the following information:
   1. In the Base Information window, perform the following steps:
      1. Specify the alias name for the vCenter certificate.
      2. Click the BROWSE button to browse and import the vCenter certificate.
      3. Click NEXT.
   2. (Optional) On the Validation window, specify the IP address of the vCenter, the Port number as 443, and then click VALIDATE.
      The Validation Result pop-up window is displayed, where you can view if the validation is successful or failed. If the validation fails, verify the inputs again.

      If you skip validation and proceed with importing the certificate, the IP and Port fields are disabled.

      NOTE:Although validation is optional, for vCenter authentication certificates, it is recommended that you perform this step to ensure that there is successful communication between Avamar and the vCenter server. The validation only works with the vCenter that has a self-signed certificate or a certificate that is issued by 1-level CA. Skip the validation if your vCenter has a certificate issued by multi-level CA.
5. Click FINISH.
   The successfully imported vCenter certificates are displayed under the Trust Certificate tab. You can view and delete the vCenter certificates by clicking the View and Delete icons, respectively.

   NOTE:To import the parent vCenter trusted certificate, open a web browser and go to https://vCenter IP, then right-click Download Root CA certificate in the bottom-right corner of the window and select Save As... to extract the file. It is not necessary to restart the MCS after the vCenter certificate is imported to the MCS keystore.