Enabling secure communication with the IBM Storage Protect server

Edit online

If you are using IBM Storage Protect server version 7.1.7 or earlier or version 8.1.2 or earlier, connection to the server by using the TLS protocol is optional and if you want to enable the Data Protection for VMware vSphere GUI communicate with the server by using the protocol, you must enable the communication manually.

Before you begin

Obtain a copy of the certificate from the server administrator.

About this task

If you are using server version 7.1.8 or version 8.1.2 or later, the TLS protocol is required and a truststore with a certificate is created automatically on first use by using default security settings that are described in Configuring by using the default security settings (fast path). However, in some scenarios, you might be required to manually create the truststore and configure the Data Protection for VMware vSphere GUI as described in this topic.

The following procedure uses the Java™ key and certificate management tool keytool.

On Linux® operating systems, the tool is in the /opt/tivoli/tsm/tdpvmware/common/jre/jre/bin/ directory.

On Microsoft Windows operating systems, the tool is in the C:\Program Files\Common Files\Tivoli\TSM\jvm80516\jre\bin directory.

You might need to specify the full path when you run the keytool command.

Procedure

  1. From the command line, change the directory to the truststore location:
    • On Linux: /opt/tivoli/tsm/tdpvmware/common/scripts/
    • On Windows: C:\Program Files\IBM\StorageProtect\Framework\VEGUI\scripts\
  2. Create the truststore and import the certificate with the following command: 
    keytool -importcert -alias my-cert -file cert.pem -keystore 
tsm-ve-truststore.jks -storepass password
    Where:
    -alias my-cert
    The unique alias that identifies the certificate in the truststore.
    -file cert.pem
    The file that contains the server self-signed certificate or the CA root certificate.
    -storepass password
    The keystore password. Ensure that you remember this password for future use.
  3. Start the Data Protection for VMware vSphere GUI and go to the Configuration window.
    • If you are creating an initial configuration, click Tasks > Run IBM Storage Protect Configuration Wizard and go to the Server Credentials page.
    • If you are modifying an existing configuration, click Tasks > Edit IBM Storage Protect Configuration and go to the Server Credentials page.
  4. Enter the port number in the IBM Storage Protect Admin Port field. This is the server port that allows administrative connections using SSL or TLS.
  5. Select Use encrypted communications on the admin port.
  6. If you want to use this setting for future GUI sessions, select Save the administrator ID, password, and port settings.
  7. Click OK to apply the changes.