Administrator Guide

10. If you have multiple nodes and a load balancer, enter a Load Balancer hostname.
11. In the Configure Network Settings dialog, choose either option below, then select OK.
• (Default) Use DHCP
• (Recommended) In the Use DHCP field, press the space bar to remove the X and manually enter these addresses, as applicable:
Static IP Network Mask Default Gateway DNS Server 1 DNS Server 2 DNS Server 3
NOTE:
When using a static IP, you must also create a host entry in the DNS server.
When using a static IP address, it may take 30 seconds for the IP address to be properly assigned to the web
portal. During the Certificate transfer dialog, if the IP address incorrectly displays a previously acquired static IP
address, ignore it. Use the configured static address.
12. When the scp screen displays, do not click OK. You must first add the .cer and .key files to the application or extract it from the
CA's .pfx or .p7b file. See Use the WinSCP tool.
NOTE:
If you click OK on the scp screen before extracting these, you must restart Data-Guardian-Web and navigate through
to the Configure Network Settings dialog.
Use the WinSCP tool
In Windows, use your ddgconsole account to scp the SSL certificate file and SSL key file.
1. In Windows, open the WinSCP tool.
2. On the WinSCP page, enter the hostname.
3. Enter the default ddgconsole user name and default password (or your modified user name and password).
4. Click Login.
5. Drag the certificate and key, .pfx file, or .p7b file from your local drive to the opt/dell/files directory.
6. If you added a .pfx file or .p7b file, enter a password when prompted. The certificate and key are extracted from the CA and added to
apache2/ssl/folder.
Optionally, instead of dragging the .pfx or .p7b file, you can manually extract the certificate. Here is sample code:
openssl pkcs12 -in domain.pfx -clcerts -nokeys -out domain.cer
Here is sample code for extracting the private key from the .pfx file:
openssl pkcs12 -in domain.pfx -nocerts -nodes -out domain.key
7. Return to the Administration Console's scp screen.
Administration Console
On the Administration Console's scp screen:
1. Click OK. The Apache2 Reverse Proxy Certificate Installation screen opens, listing the certificate.
2. Select a certificate and press Enter.
3. Do one of these:
• If you added a key on the WinSCP tool, select the key at the next screen and press Enter.
• If you entered a password on the WinSCP tool for a .pfx file or .p7b file, enter the password when prompted and click OK.
4. At the Set Dell Server screen, enter the name of your Dell Server hostname and click OK. A dialog displays, listing a URL to use when
provisioning. The URL is in this format: https://node.domain.com/edap-admin-ui/provision_node.
NOTE:
node.domain.com is the name you entered in Configure Hostname . The URL points to that node.
5. Open a browser and type that URL.
6. When the Data Guardian node provisioning page opens, click Start Node Provisioning.
7. At the Login page, enter your domain email and password and click Login. Dell Data Guardian dialog states that provisioning was
successful.
8. Return to the Administration Console screen that listed your URL and click OK. The application server restarts and the Administration
Console > Main Menu opens.
Additional tasks:
• Provide the URL to internal users to allow them to access the Data Guardian web client.
• For a single node, the URL is in this format: https://nodename/ where nodename reflects the hostname entered in the
Configure Hostname screen.
Configure and Install Data Guardian for the Web Client
29