Welcome to Dell Technologies RecoverPoint for Virtual Machines How To Series. RecoverPoint for Virtual Machines. How to Update Certificates in RP4VM 5.3 Environments. Reference Dell Knowledge Article # 181907.
This video was created to provide a clear procedure for certificates exchange or update in 5.3 releases between vRPA vCenter server and plugin server. When to do this.
If vCenter server or RP certificate has been changed to a self or CA-signed ones rather than the default one. If the plugin server was unable to retrieve the default certificate automatically.
When plugin server deployment is failing with certificate errors. Before you begin, make sure you have IP addresses and SSH access to vRPAs Plugin and vCenter server.
Root credentials for vRPA, Plugin and vCenter server. Credentials for the account used to register vCenter server to RecoverPoint. And... WinSCP or other FTP client to move the files from or to the Linux host.
Adding an RP certificate to the plugin server. Open a Web browser and go to your vSphere HTML5 interface. When prompt to log in enter your vCenter administrator account credentials. From the Menu tab, make sure to select Hosts and Clusters.
Select the plugin server VM and open its web console. Log in to the plugin server VM with root credentials and enter the command seen on the screen and CLI to enable SSH access on the plugin server.
Now, open SSH using root credentials to plugin server VM. Open SSH session to site control vRPA and log in as admin to enable root access on the system.
Enter number two: Setup. Eight: Advanced options. Two: Security options. Then three: Enable root access. Create a duplicate session and log in as root. Enter the command displayed on the screen to copy RPA certificate into the plugin server VM.
When prompt, enter the plugin server root password. Go to plugin server VM and run the command shown on the screen. Go back to vSphere client and power off the plugin server VM.
Wait for two minutes and then power the VM back on. Adding vCenter certificate to plugin server. Open a Web browser and go to the URL shown on the screen.
Save the downloaded file on your local machine. Open WinSCP to use it in moving the certificate files from your local machine to the plugin server VM.
When prompt to log in enter the plugin server VM root credentials. Now, go to the file you downloaded containing the vCenter certificate and extract it on your local machine.
In WinSCP, go to the extracted folder in your local machine and move the certificate files present in Certs, Lin folder to the plugin server VM anchors directory.
Make sure to only copy files ending with .0 extension. Go to the plugin server VM SSH session and log in as root. Then run the update certificate command shown on the screen.
From vSphere web client right-click on the plugin server VM to power it off. Wait for two minutes. Power the VM back on. Adding vCenter certificate to RecoverPoint.
Open a Web browser and go to the URL shown on the screen to download vCenter server certificate. Save the downloaded file on your local machine. Open the file you downloaded and go to Certs, Lin folder.
Open the file ending with .0 extension in a notepad to copy vCenter certificate. Edit certificate format to match the format on the screen including the hashtag at the end of the file.
Open SSH session to site control IP address with admin account and add the certificate to the RPA. Select the options shown on the screen. Note that certificate alias can be any name of your choice.
Paste the certificate and confirm it was added successfully. Go to the main menu, then select system management CLI. Run the command shown on the screen to update vCenter certificate enter the required information for vCenter server then make sure update was successful.
Note, that reboot for site control RPA might be required. Reference the following for more information KB 181907.
Thank you for watching.
