2.5
Table Of Contents
- ACE Management Server Administrator’s Manual
- Contents
- About This Book
- Introduction
- Planning an ACE Management Server Deployment
- Installing and Configuring ACE Management Server
- Configuration Options for ACE Management Server
- Prerequisites for Configuring the Server
- Starting ACE Management Server Configuration
- Viewing and Changing Licensing Information
- Using an External Database
- Creating Access Control
- Uploading Custom SSL Certificates
- Logging Events
- Applying Configuration Settings
- Load-Balancing Multiple ACE Management Server Instances
- Typical Setup Using Load-Balanced ACE Management Server Instances
- Install the Required Services for Load Balancing
- Use the Same SSL Certificate on All Servers
- Create New SSL Certificates and Keys for Each Server
- Installing and Configuring the Load Balancer
- Verify That ACE Instances Are Using the Load Balancer
- Managing ACE Instances
- Viewing ACE Instances That the Server Manages
- Search for an Instance
- Sort by Column Heading and Change Column Width
- Show, Hide, and Move Columns in the Instance View
- Create or Delete Custom Columns in the Instance View
- View Instance Details
- Reactivate, Deactivate, or Delete an ACE Instance
- Change a Copy Protection ID
- Reset the Authentication Password
- Add Information for Custom Columns
- Troubleshooting and Maintenance
- Appendix: Database Schema and Audit Event Log Data
- Glossary
- Index
ACE Management Server Administrator’s Manual
40 VMware, Inc.
2Configurethedatabase.
Ensurethatyouhaveadedicateddatabaseandauseraccountthathasfullaccess
tothisdatabase,includingrightstocreatetables.Donotgivethisdatabaseuser
permissionsthatitdoesnotneed.Forexample,youmightnotwanttogivethis
accountreadorwrite
permissiontootherdatabasesthatyourRDBMSmanages.
AlltablesthatarecreatedinthedatabasehaveanamestartingwithaPolicyDb_
prefixandindexeswithPdbIns_orPdbLf_prefixes.YoumightprovideACE
ManagementServerwithaDSNtoadatabasethatitshareswithsomeother
application,if
thedatabasecountisatapremium.
3 (Optional)IfACEManagementServerisgoingtoconnecttothedatabaseoverthe
network(TCPsocketconnection),ensurethatthefollowingareinplace:
TCPconnectivityisenabledinthedatabaseconfigurationoptions.
TheTCPconnectionisnotblockedbyfirewallsettingsonthedatabaseserver
ortheACEManagementServerhost.
IfyouareusingaPostgreSQLdatabase,configureper‐userpermissionto
connecttothedatabaseoverthenetwork.Configurethatpermissioninthe
pg_hba.conf file,whichislocatedintherootfolderofyourdatabase.
4 (Optional)OntheACEManagementServermachine,toverifytheserver’s
connectivitytothedatabasewith
theconfiguredusercredentials,runa
command‐lineorgraphicalSQLtool.
Examplesofsuchtoolsaresqlcmd.exeforSQLServer,sqlplus.exeforOracle,
andpsqlforPostgresSQL.Fordatabaseconfigurationandverification
instructions,seetherespectivedatabasedocumentation.
5OntheACEManagementServermachine,createaSystemDSNentry.
Creating a System DSN Entry for an External Database
TheonlyrequiredinformationinDSNconfigurationistheDSNname,serverIPaddress
orhostname,andthedatabasename.Youdonotneedtoprovideausernameand
passwordintheDSNconfiguration.Youprovideausernameandpasswordlater,
whenyouusetheACEManagementServer
Setupapplication.
EnsurethatyoucreateasystemDSNandnotauserDSN.IfyoucreateauserDSN,it
isvisibleonlytoyouruseraccount.ACEManagementServerrunsunderthelocal
systemaccount,sotheservercannotdetectoruseauserDSN.