Welcome to Dell Technologies RecoverPoint for Virtual Machines
How To Series.
RecoverPoint for Virtual Machines.
How to Update Certificates in RP4VM 5.3 Environments.
Reference Dell Knowledge Article # 181907.
This video was created to
provide a clear procedure for certificates exchange
or update in 5.3 releases between vRPA
vCenter server and plugin server.
When to do this.
If vCenter server
or RP certificate has been changed to a self or CA-signed ones
rather than the default one.
If the plugin server was unable to retrieve
the default certificate automatically.
When plugin server deployment is failing with certificate errors.
Before you begin, make sure you have
IP addresses and SSH access to vRPAs
Plugin and vCenter server.
Root credentials for vRPA, Plugin and vCenter server.
Credentials for the account used to register vCenter server
to RecoverPoint.
And...
WinSCP or other FTP client to move the files
from or to the Linux host.
Adding an RP certificate to the plugin server.
Open a Web browser and go to your vSphere HTML5 interface.
When prompt to log in
enter your vCenter administrator account credentials.
From the Menu tab, make sure to select Hosts and Clusters.
Select the plugin server VM and open its web console.
Log in to the plugin server VM with root credentials
and enter the command seen on the screen
and CLI to enable SSH access on the plugin server.
Now, open SSH using root credentials to plugin server VM.
Open SSH session to site control vRPA
and log in as admin to enable root access on the system.
Enter number two: Setup.
Eight: Advanced options.
Two: Security options.
Then three: Enable root access.
Create a duplicate session and log in as root.
Enter the command displayed on the screen
to copy RPA certificate into the plugin server VM.
When prompt, enter the plugin server root password.
Go to plugin server VM and run the command shown on the screen.
Go back to vSphere client and power off the plugin server VM.
Wait for two minutes and then power the VM back on.
Adding vCenter certificate to plugin server.
Open a Web browser and go to the URL shown on the screen.
Save the downloaded file on your local machine.
Open WinSCP to use it in moving the certificate files
from your local machine to the plugin server VM.
When prompt to log in
enter the plugin server VM root credentials.
Now, go to the file you downloaded containing the vCenter certificate
and extract it on your local machine.
In WinSCP, go to the extracted folder in your local machine
and move the certificate files present in Certs, Lin folder
to the plugin server VM anchors directory.
Make sure to only copy files ending with .0 extension.
Go to the plugin server VM SSH session and log in as root.
Then run the update certificate command shown on the screen.
From vSphere web client
right-click on the plugin server VM to power it off.
Wait for two minutes.
Power the VM back on.
Adding vCenter certificate to RecoverPoint.
Open a Web browser and go to the URL shown on the screen
to download vCenter server certificate.
Save the downloaded file on your local machine.
Open the file you downloaded and go to Certs, Lin folder.
Open the file ending with .0 extension in a notepad to copy vCenter certificate.
Edit certificate format to match the format on the screen
including the hashtag at the end of the file.
Open SSH session to site control IP address with admin account
and add the certificate to the RPA.
Select the options shown on the screen.
Note that certificate alias can be any name of your choice.
Paste the certificate and confirm it was added successfully.
Go to the main menu, then select system management CLI.
Run the command shown on the screen to update vCenter certificate
enter the required information for vCenter server
then make sure update was successful.
Note, that reboot for site control RPA might be required.
Reference the following for more information
KB 181907.
Thank you for watching.