VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION Guide de l'utilisateur télécharger pdf (Page 251)

1. Open a command prompt.

2. Navigate to the C:\Program Files (x86)\VMware\VCM\AgentData\protected directory, and

delete these files: ECMv.csi.pds and ECMv.csi.pds.lck.

3. Execute the following command: GenerateAgentProxyKeys.cmd.

4. Verify that the following files were generated:

<machine>_securecomm_public_key.txt

<machine>_ssh_public_key.txt

5. From the command prompt, execute the following command: DatabaseUploadKey.cmd

<machine>_securecomm_public_key.txt (where <machine> is the name of the Agent Proxy

machine).

For more information about generating key pairs on the Agent Proxy Machine, see the Getting Started

with VCM chapter.

Resetting the Required Secure Channel (SSL)

When using SSL on the VCM collector, the following settings must be configured for VCM to work

properly with SSL:

Web.config file in the WebConsole directory

Require secure channel (SSL) setting in IIS – for the VCM virtual directory

IIS HTTP string http or https Database setting in VCM

When upgrading the Collector, the Require secure channel (SSL) check box in the VCM virtual directory

properties may become unchecked. This problem can occur on a VCM Collector that is using SSL, when all

of the settings listed above have been configured.

After upgrading VCM, log in and verify whether https is still required. If not, confirm that the settings to

the Web.config configuration file, the VCM virtual directory, and the IIS settings are correct by using these

procedures.

Updating the VCM Virtual Directory

To update the VCM virtual directory, follow these steps:

1. Access Internet Information Services by opening a command prompt, and then typing

compmgmt.msc.

2. Expand the Services and Applications node and expand Internet Information Services > Web Sites >

Default Web Site.

3. Right-click the VCM virtual directory, and select Properties.

4. In the VCM Properties dialog box, click the Directory Security tab, and in the Secure

Communications panel, click Edit.

5. In the Secure Communications dialog box, check the Require secure channel (SSL) check box, and

click OK twice to save the virtual directory properties.

Updating the IIS Settings in VCM

To modify the IIS settings in VCM, follow these steps:

Troubleshooting Problems with VCM

VMware, Inc. 251

1 2 ... 246 247 248 249 250 251 252 253 254 255 256 257 258

Pas de commentaire

VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION Guide de l'utilisateur Page 251