PowerProtect Data Manager 19.10 Security Configuration Guide

Exchange the new security certificates with vCenter for SPBM

When you replace the security certificates or upgrade PowerProtect Data Manager, you may need to exchange the new certificates with vCenter for storage policy based management (SPBM).

1. Obtain the new PowerProtect Data Manager root certificate.
   Use SCP or another file transfer utility to download the certificate at /etc/ssl/certificates/custom/globalca.pem from the server.
2. Add the vCenter as an asset source and complete asset discovery.
   The PowerProtect Data Manager Administration and User Guide provides more information.
3. Add the new PowerProtect Data Manager root certificate to the vCenter certificate store.
   The VMware documentation provides more information.
4. Register PowerProtect Data Manager with SPBM:
   The VMware documentation provides more information. Select the top-level vCenter host.

   Value	Description
   Name	Any descriptive name. For example, PowerProtectDataManager-FQDN.
   URL	https://PowerProtectDataManager-FQDN:9009/vasa/version.xml
   Username	A PowerProtect Data Manager user with the Administrator role.
   Password	The corresponding account password.

   Substitute the placeholders with the PowerProtect Data Manager fully qualified domain name.