Install a CertGenVVD-Generated Certificate on vSphere Data Protection in Region A

After you use the VMware Validated Design Certificate Generation Utility (CertGenVVD) to generate certificates for the SDDC management components, replace the default VMware-signed certificate on vSphere Data Protection in Region A with the certificate that is generated by CertGenVVD.

Before you begin

Generate the Microsoft CA-signed certificate by using the CertGenVVD tool. See Use the Certificate Generation Utility to Generate Certificates Automatically in Region A.

Procedure

1. Copy the .keystore file that CertGenVVD tool generated to the /root folder on the vSphere Data Protection virtual appliance.

   You can use scp, FileZilla or WinSCP.

2. Log in to the vSphere Data Protection appliance.

   1. Open an SSH connection to the virtual machine mgmt01vdp01.sfo01.rainpole.local.
   2. Log in using the following credentials. |Setting|Value| |:------|:----| |User name|root| |Password|vdp_root_password|

3. Restart all vSphere Data Protection services by running the following commands.

   {#GUID-49135D00-4863-4D92-ADC1-9B3BD7D7BE16__codeblock_8EE9361C04B2439C843AE6AAAA672008 .pre .codeblock} dpnctl stop all dpnctl start all

4. Run the addFingerprint.sh script to update the vSphere Data Protection server thumbprint displayed in the VM console welcome screen.

   {#GUID-49135D00-4863-4D92-ADC1-9B3BD7D7BE16__codeblock_82F373376C3A4F7FB32565508637805C .pre .codeblock} /usr/local/avamar/bin/addFingerprint.sh

Parent topic: Replace the Certificate of vSphere Data Protection in Region A

Related tasks

Install a Manually Generated Certificate on vSphere Data Protection in Region A