- Notes, cautions, and warnings
- Disclaimer
- Preface
- Introduction
- Authentication
- Component access control
- Login security settings
- Log in to the PowerProtect Data Manager Appliance REST API
- User and credential management
- Authentication types and setup
- Multi-factor authentication
- iDRAC
- Identity providers
- Authentication to external systems
- Authorization
- Log Settings
- Network and Communication Security Settings
- Data Security Settings
- Cryptography
- Security certificates
- External component certificate management
- Security Updates and Patching
- Authenticity and Integrity
- About product authenticity and integrity
- Verification
- Verify the signer or signers for Windows binaries
- Verify the vendor for Linux (RPM-based) packages
- Verify the vendor for Linux (Debian-based) packages
- Verify GPG signatures for Linux (RPM-based) packages
- Verify the signature for JAR files
- Verify SHA-256 checksums in Windows
- Verify SHA-256 checksums in Linux
- Verify SHA-256 checksums in AIX
- Miscellaneous Configuration and Management Elements
- REST API Procedures
- TLS Cipher Suites
- Glossary
PowerProtect Data Manager Appliance 5.15.0.0 Security Configuration Guide for DM5500
Remove the PowerProtect Data Manager Appliance SPBM security certificates from vCenter
When you replace the security certificates, you can remove the old certificates from vCenter to clean up the certificate store.
Prerequisites
Review VMware KB articles 2111411 and 2146011.
CAUTION:Remove only the root certificate that enables
PowerProtect Data Manager Appliance to work with SPBM.
Steps
-
Open the vCenter Server Appliance (vCSA) management interface.
Go to https://vCenter:5480.
-
Enable SSH access.
The VMware documentation provides more information.
-
Establish an SSH session to the vCSA and then open an elevated BASH shell session.
VMware KB article 2111411 provides instructions.
-
Remove the
PowerProtect Data Manager Appliance SPBM security certificates from the certificate store.
VMware KB article 2146011 provides instructions for expired or expiring certificates, but the procedure is the same to remove the PowerProtect Data Manager Appliance root certificate. The VMware KB article provides instructions for vCSAs and for Windows vCenter servers.
Use the information from the certificate on the PowerProtect Data Manager Appliance server at /etc/ssl/certificates/custom/globalca.pem to identify the certificate.
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\