PowerProtect Data Manager Appliance 5.15.0.0 Security Configuration Guide for DM5500

Exchange the PowerProtect Data Manager Appliance security certificates with external components

While PowerProtect Data Manager Appliance maintains a certificate store for trusted external components, you can also exchange the server certificates with external components for greater protection.

PowerProtect Data Manager Appliance automatically presents the server certificate during the initial handshake when you connect to the server from an external component. The external component normally accepts and stores the server certificate for later use and authentication. No further action is required.

If the server certificate was not automatically presented or retained, you can get the certificate through the REST API. The PowerProtect Data Manager Appliance Public REST API documentation provides more information.

Use curl or a REST API client of your choice. An access token is not required. However, the REST API client may require an additional parameter to allow connections with servers that use self-signed certificates.

GET https://{{server}}:{{port}}/api/v2/jwks

The REST API service returns a status code and the server certificate:

200 OK
{
	"keys": [
		{
			"kty": "EC",
			"use": "sig",
			"crv": "P-256",
			"kid": "a86a7118-99f9-4768-bdda-8012474c8685",
			"x5c": [
				"MIIDBTCCAe2gAwIBAgIESvEK5DANBgkqhkiG",
				"MIIDizCCAnOgAwIBAgIEMayrSDANBgkqhkiG"
			],
			"x": "GdPBk9pB5VkppISLMHhKaQ5EIBsPeaoERgarTagRJko",
			"y": "QiVYHOUdiGPzCW8NvJifB5qVkShDcmsKd8F2g_zdGvE",
			"alg": "ES256"
		},
		{
			"kty": "RSA",
			"e": "AQAB",
			"use": "sig",
			"kid": "7452f2bb-3a83-4569-a0fc-7fe255284fb4",
			"alg": "RS256",
			"n": "jTgO5NHdgzLhkv619gjh5Uz07v8-ZFHtpsDT"
		}
	]
}

Some values in this example were truncated to fit the available space.