Dell EMC Avamar for VMware 19.7 User Guide

Adding ESX host authentication certificates to the MCS keystore

Add an ESX host authentication certificate to the MCS keystore. Do this for each ESX host you intend to protect.

1. Open a command shell and log in by using one of the following methods:
   • For a single-node server, log in to the server as admin.
   • For a multi-node server, log in to the utility node as admin.
2. Stop the MCS by typing the following command:
   dpnctl stop mcs
3. Switch user to root by running the following command:
   su -
4. Copy /etc/vmware/ssl/rui.crt from the ESX host machine to /tmp on the Avamar utility node or single-node server.
5. Copy the MCS keystore to /tmp by typing:
   cp /usr/local/avamar/lib/rmi_ssl_keystore /tmp/
   This creates a temporary version of the live MCS keystore in /tmp.
6. Add the default ESX host certificate to the temporary MCS keystore file by typing:

   cd /tmp
   $JAVA_HOME/bin/keytool –import –file rui.crt -alias alias -keystore rmi_ssl_keystore

   where alias is a user-defined name for this certificate, which can often be the file name.
7. Type the keystore password.
8. Type yes, and press Enter to trust this certificate.
9. (Optional) If you will be protecting more than one ESX host with this Avamar server, add those ESX host certificates now.
10. Back up the live MCS keystore by typing:

    cd /usr/local/avamar/lib
    cp rmi_ssl_keystore rmi_ssl_keystore.date

    where date is today's date.
11. Copy the temporary MCS keystore to the live location by typing:
    cp /tmp/rmi_ssl_keystore /usr/local/avamar/lib/
12. Exit the root subshell by typing exit.
13. Start the MCS and the scheduler by typing the following command:

    dpnctl start mcs
    dpnctl start sched