PowerProtect Data Manager 19.17 Virtual Machine User Guide

Change the vCenter server FQDN

When the FQDN of the vCenter server changes, its new SSL certificate must be imported into the PowerProtect Data Manager trust store.

1. Get the current information from the vCenter server, and make a note of the value of id, which corresponds to the new FQDN certificate:
   GET https://192.168.1.204:8443/api/v2/certificates?host=a022-renamed.ppdm.vmware.com&port=443&type=Host

   For example, the output might look like this:

   fingerprint: "43FF8FBA82D1DD68E630AE9DB8BA7DF21549CE39"
   host: " a022-renamed-ppdm.vmware.com"
   id: "dmNlbnRlci12bWRtLTA0LmFzbC5sYWIuZW1jLmNvbTo0NDM6aG9zdA=="
   issuerName: "OU=VMware Engineering, O= a022-renamed-ppdm.vmware.com, ST=California, C=US, DC=local, DC=vsphere, CN=CA"
   notValidAfter: "Mon Mar 11 17:39:09 PDT 2030"
   notValidBefore: "Mon Mar 16 17:39:09 PDT 2020"
   port: "443"
   state: "UNKNOWN"
   subjectName: "C=US, CN=vcenter-vmdm-04.asl.lab.emc.com"
   type: "HOST"

2. Import the new certificate into the PowerProtect Data Manager trust store:
   PUT https://192.168.1.204:8443/api/v2/certificates/{newCertID}

   Replace {newCertID} with the value of id displayed in step 1. Only use the text that was displayed between the quotation marks.

3. Get the ID of the vCenter server:
   GET https://192.168.1.204:8443/api/v2/inventory-sources/

   All vCenter servers that are configured in PowerProtect Data Manager are displayed.

   For example, the output might look like this:

   "id": "6ffdb6e9-b864-56f4-8ec8-fe1c214c6fef",
               "name": "VC",
               "version": "7.0.2",
               "type": "VCENTER",
               "lastDiscovered": "2021-08-10T07:03:41.624Z",
               "lastDiscoveryResult": {
                   "status": "OK",

4. Perform the following GET and PUT requests:
   1. Make a GET request using the ID of the vCenter obtained in the previous step:
      GET https://192.168.1.204:8443/api/v2/inventory-sources/{vCenter-id}

      Replace {vCenter-id} with the value of id displayed for the vCenter server in step 3. Only use the text that was displayed between the quotation marks.

   2. Copy the entire response from the above GET request and paste it in the body of the following PUT request. When you run this PUT request, ensure that you replace the "address" field value with the new FQDN:
      PUT https://192.168.1.204:8443/api/v2/inventory-sources/{vCenter-id}

      For example, if "a022-renamed.ppdm.vmware.com" is the new FQDN value, then replace the address field in the PUT body with "address":"a022-renamed.ppdm.vmware.com". The other values in the PUT body remain the same as what was obtained in the response from the GET request.

5. Get the current list of certificates:
   GET https://192.168.1.204:8443/api/v2/certificates
   Both the old and new FQDN certificates are displayed. There might also be additional certificates displayed.
6. Search the certificate entries displayed in step 5, and locate the entry where the value of host matches the old FQDN of the vCenter server. Make a note of the corresponding id value.
7. Delete the old certificate from the PowerProtect Data Manager :
   DELETE https://192.168.1.204:8443/api/v2/certificates/{oldCertID}

   Replace {oldCertID} with the value of id noted in step 6. Only use the text that was displayed between the quotation marks.