PowerProtect Data Manager 19.10 Security Configuration Guide

Replace security certificates with the CLI tool

This method replaces the security certificates for the UI server and the REST API.

Review the information in Certificate management.

This task assumes that private-key.pem holds the security certificate's private key and that public-cert.pem holds the public certificate chain.

Connect to the PowerProtect Data Manager console as an admin user.
Securely copy private-key.pem and public-cert.pem to the /home/admin/.config directory.
Change to the /home/admin/.config directory:
cd /home/admin/.config

Verify the certificate and key permissions:

ls -l

The console displays output similar to the following:

-rwx------ 1 admin admin 1675 Aug 28 16:57 private-key.pem
-rwx------ 1 admin admin 3824 Aug 28 16:58 public-cert.pem

Replace the existing security certificates:

ppdmtool -replacecert -key /home/admin/.config/private-key.pem -cert /home/admin/.config/public-cert.pem

For encrypted keys, include a -password <password> parameter.
For any existing UI sessions, refresh the page to allow the new certificates to take effect.

If you have added any vCenter servers, reinstall the PowerProtect plug-in. Reinstall the PowerProtect plug-in for the vSphere client provides more information.