2.5
Table Of Contents
- ACE Management Server Administrator’s Manual
- Contents
- About This Book
- Introduction
- Planning an ACE Management Server Deployment
- Installing and Configuring ACE Management Server
- Configuration Options for ACE Management Server
- Prerequisites for Configuring the Server
- Starting ACE Management Server Configuration
- Viewing and Changing Licensing Information
- Using an External Database
- Creating Access Control
- Uploading Custom SSL Certificates
- Logging Events
- Applying Configuration Settings
- Load-Balancing Multiple ACE Management Server Instances
- Typical Setup Using Load-Balanced ACE Management Server Instances
- Install the Required Services for Load Balancing
- Use the Same SSL Certificate on All Servers
- Create New SSL Certificates and Keys for Each Server
- Installing and Configuring the Load Balancer
- Verify That ACE Instances Are Using the Load Balancer
- Managing ACE Instances
- Viewing ACE Instances That the Server Manages
- Search for an Instance
- Sort by Column Heading and Change Column Width
- Show, Hide, and Move Columns in the Instance View
- Create or Delete Custom Columns in the Instance View
- View Instance Details
- Reactivate, Deactivate, or Delete an ACE Instance
- Change a Copy Protection ID
- Reset the Authentication Password
- Add Information for Custom Columns
- Troubleshooting and Maintenance
- Appendix: Database Schema and Audit Event Log Data
- Glossary
- Index
ACE Management Server Administrator’s Manual
24 VMware, Inc.
Deployment Planning Worksheet
Usethedeploymentplanningworksheettorecordyourchoiceofserversystem,
database,securitycertificates,andoptionalcomponentsforaproductionenvironment.
Table 2-5. Worksheet for ACE Management Server in a Production Environment
Component Considerations Decision
Active
Directory
integration
PerformanceisbetterwhentheACE
ManagementServerisinstalledona
Windowshost.
Seealso“CreateUsersandGroupsfor
IntegrationwithActiveDirectory”on
page 38.
UseActiveDirectory?________
Ifyes,nameofuseraccountforACE
ManagementServertoquerytheActive
Directorydatabase:__________________
Fullyqualified
domainnameofthe
LDAPserver:_______________________
ACE
Management
Server
Ifyouusemultipleservers,allmustbe
installedonthesameplatform.
Forcapacityplanning,see“Numberof
ClientsSupported”onpage 17.
UseWindowsorLinux
hosts?_____________
Howmanyservers?____________
Database
server
Thedatabaseservermustbecompatible
withtheACEManagement
Serverhost.See
“SupportedExternalDatabases”on
page 12.
MSQL,Oracle,orPostgresSQLdatabase?
____________________________
Loadbalancer Usealoadbalancerforlargedeployments
orforhighavailability.Itmustsupport
HTTPSandrequiresanexternaldatabase.
See“LoadBalancers”onpage 20.
Usealoadbalancer?________
Proxy IfACEclientswillcontactACE
ManagementServer
fromoutsidethe
firewall,useaproxy.See“A c c e s s i n g ACE
ManagementServerfromOutsidethe
CorporateFirewall”onpage 22.
Useaproxy?__________
ApacheProxyorZeus TechnologyLoad
Balancer?________________________
SSL
certificates
Ifyouusemultipleserversandplantouse
adifferentSSLcertificateforeachone,you
mustcreate
orsendforthecertificates.
ACEManagementServersupportsonly
public‐keycertificatesthataresignedusing
theSHA1algorithm.See“UsingSSL
CertificatesandProtocol”onpage 21.
Whichtypeofcertificate:self‐signed
third‐party,orinternalCA(certificate
authority)?___________________
Numberofcertificates?__________
Ports ForActiveDirectory,useport389.
For
theACEManagementServer
appliance,useport8080.See“Changethe
PortAssignmentforACEManagement
Server”onpage 70and“A c c e s s i n g ACE
ManagementServerfromOutsidethe
CorporateFirewall”onpage 22.
Port8000forconfiguringtheACE
ManagementServer.
Port443forclientrequests.
Whichadditionalports?______________