Search <book_title>...

Veritas InfoScale™ Operations Manager 7.4.2 Installation and Configuration Guide

Last Published: 2020-06-01

Product(s): InfoScale & Storage Foundation (7.4.2)

Platform: AIX,Linux,Solaris,Windows

Configuring Veritas InfoScale Operations Manager on Linux using third-party certificates

You can configure Veritas InfoScale Operations Manager CMS using third-party certificate only on a Linux host.

Note:

Make sure to configure third-party certificates only on a fresh installation of 7.4.2. It will not work on an upgraded CMS.

To configure third-party certificate on Veritas InfoScale Operations Manager

Install the Veritas InfoScale Operations Manager CMS.
See About installing Management Server.
After the installation, open the configuration file:
/opt/VRTSsfmcs/sec/bin/VRTSatlocal.conf
Set the value of the ThirdPartyCertificateUse attribute:
ThirdPartyCertificateUse"=dword:00000001"
Configure Veritas InfoScale Operations Manager.
See Configuring Veritas InfoScale Operations Manager on Linux and Windows.
While you configure Veritas InfoScale Operations Manager, the Certificate Setting panel appears. Enter the Certificate Passphrase for the authentication broker (AB). Confirm Passphrase. This passphrase is used to create the third-party AB certificate.
Note:
Remember this passphrase, as this passphrase is required in the subsequent steps.
Use the key ABPrivateKey.pem to generate an intermediate certificate authority (CA) certificate from your rootCA.
The key is located at:
/var/opt/VRTSsfmcs/sec/root/.VRTSat/profile/certstore/keystore/ABPrivateKey.pem
Intermediate CA certificate should be 2048 bit with sha-256 signature.
The purpose of the certificate should be:
```
#openssl x509 -purpose  -noout -in <Certificate_File>
Certificate purposes:
SSL client : Yes
SSL client CA : Yes
SSL server : Yes
SSL server CA : Yes
```
While generating the certificate signing request (CSR), enter the values as given in the following table:
Attribute
Value
Country Name
. (Dot)
State or Province Name
. (Dot)
Locality Name
. (Dot)
Organization Name
vx
Organizational Unit Name
root@<CMS FQDN>
Common Name
broker
Email Address
. (Dot)
```
Country Name (2 letter code) [GB]:.
State or Province Name [England]:.
Locality Name []:.
Organization Name [Alice Ltd]:vx
Organizational Unit Name []:root@<CMS FQDN>
Common Name []:broker
Email Address []:.
```
Note:
While you generate the certificate, you are prompted to enter the passphrase. Enter the same passphrase that you used while configuring the Veritas InfoScale Operations Manager CMS.
Copy the newly generated AB certificate on your CMS in any directory like /temp.
Copy the rootCA certificate on your CMS in the same directory as in step 7.
Edit /opt/VRTSsfmh/util/config_cms_for_thirdpartycert.pl and set the path:
Root CA certificate file path
my $myroot_ca_cert = "/temp/<Root certificate file name>";
Intermediate CA certificate file path
my $myca_cert = "/temp/<Intermediate certificate file name>";
Run the script:
/opt/VRTSsfmh/bin/perl /opt/VRTSsfmh/util/config_cms_for_thirdpartycert.pl
Verify that the third-party certificate is configured successfully.
openssl s_client -connect <hostname:5634> -showcerts

Attribute	Value
Country Name	. (Dot)
State or Province Name	. (Dot)
Locality Name	. (Dot)
Organization Name	vx
Organizational Unit Name	root@<CMS FQDN>
Common Name	broker
Email Address	. (Dot)