I note from some older discussions that multiple vCenter support in Avamar was expected in 6.1. It doesn't appear in the manual, so I'm wondering if there's any way for this to be accomplished. My enviornment requires two separate vCenters, and while I have managed to add the certificate from the first for image backups there are some VMs on the second that I need to backup.
The procedure for installing a certificate into the keystore is on page 24 of the UserGuide for VMware. You can repeat the "keytool" step for each certificate you want to import as long as you have copied each certificate over to the Avamar server with a unique name and give the keystore entry a unique alias, e.g.:
Alternatively, after importing the first keystore entry in step 6, you can repeat step 4 and step 6 for each additional .crt file before continuing with the rest of the procedure. Make sure you skip step 5 or you'll overwrite the previous change.
Would it be helpful to have the guide specifically mention this? If so, I can open a docbug to ask for an update to the guide.
Avamar 6.1 servers support up to 5 vCenters. You can find instructions for how to enable multiple vCenters in the Avamar 6.1 UserGuide for VMware. In document revision R06, the instructions start on page 21.
Thank you, that was certainly worth verifying since that section wasn't in my Rev A01 manual. My installation was already configured for max 5 vCenters. I'll have to read through the manual more carefully, but my initial impression is that it still doesn't deal with importing multiple certificates into the keystore with adequate clarity (from my perspective).
BTW, for an explanation that may assist others with a similar issue (other than manual version) it seems the import of the second vCenter cert hadn’t properly trusted.
FYI, I used the following to clear out the erroneous certs in the keystore and then repeated the process as detailed in both versions of the manual: $JAVA_HOME/bin/keytool -list -v -keystore rmi_ssl_keystore $JAVA_HOME/bin/keytool -delete -alias -keystore rmi_ssl_keystore
ionthegeek
2 Intern
•
2049 Posts
746
0
Posted November 16th, 2012 16:00
My pleasure!
The procedure for installing a certificate into the keystore is on page 24 of the UserGuide for VMware. You can repeat the "keytool" step for each certificate you want to import as long as you have copied each certificate over to the Avamar server with a unique name and give the keystore entry a unique alias, e.g.:
$JAVA_HOME/bin/keytool –import –file rui1.crt -alias vCenter1 -keystore rmi_ssl_keystore
$JAVA_HOME/bin/keytool –import –file rui2.crt -alias vCenter2 -keystore rmi_ssl_keystore
Alternatively, after importing the first keystore entry in step 6, you can repeat step 4 and step 6 for each additional .crt file before continuing with the rest of the procedure. Make sure you skip step 5 or you'll overwrite the previous change.
Would it be helpful to have the guide specifically mention this? If so, I can open a docbug to ask for an update to the guide.