2.7
Table Of Contents
- ACE Management Server Administrator’s Manual
- Contents
- About This Book
- Introduction
- Planning an ACE Management Server Deployment
- Installing and Configuring ACE Management Server
- Configuration Options for ACE Management Server
- Prerequisites for Configuring the Server
- Starting ACE Management Server Configuration
- Viewing and Changing Licensing Information
- Using an External Database
- Creating Access Control
- Uploading Custom SSL Certificates
- Logging Events
- Applying Configuration Settings
- Load-Balancing Multiple ACE Management Server Instances
- Typical Setup Using Load-Balanced ACE Management Server Instances
- Install the Required Services for Load Balancing
- Use the Same SSL Certificate on All Servers
- Create New SSL Certificates and Keys for Each Server
- Installing and Configuring the Load Balancer
- Verify That ACE Instances Are Using the Load Balancer
- Managing ACE Instances
- Viewing ACE Instances That the Server Manages
- Search for an Instance
- Sort by Column Heading and Change Column Width
- Show, Hide, and Move Columns in the Instance View
- Create or Delete Custom Columns in the Instance View
- View Instance Details
- Reactivate, Deactivate, or Delete an ACE Instance
- Change a Copy Protection ID
- Reset the Authentication Password
- Add Information for Custom Columns
- Troubleshooting and Maintenance
- Appendix: Database Schema and Audit Event Log Data
- Glossary
- Index
ACE Management Server Administrator’s Manual
34 VMware, Inc.
Ifyouareupgradingtheserverfromthepreviousrelease,thedatabaseschemaisupgradedautomaticallyand
youdonotloseyourpreviousdata.Theupgradeisperformedonthefirststartoftheupgradedserver,even
ifyoudonotrerunthesetupapplication.
Ifyoumakechangestothe
informationontheDatabasetab,youmustclickApplyorCancelbeforeyoucan
navigatetoanothertab.
Creating Access Control
OntheAccessControltab,youcancreatealocalAdministratorroleandHelpDeskroleoruseActive
Directoryforauthenticatinguserswiththeseroles.
BeforeyoucanconfiguretheACEManagementServertouseadomainaccountforauthentication,youmust
createusersandgroupssothatACEManagement
ServercanconnecttotheLDAPserver.See“CreateUsers
andGroupsforIntegrationwithActiveDirectory”onpage 27.
Usethefollowinginformationtohelpyoucompletethefieldsforauthentication:
Localaccount–IfyouspecifyapasswordfortheAdministratorroleandforgetorloseit,youmustdelete
theserverconfigurationfile.Deletingthisfilesetstheserverbacktoitsinitialstate.Youmustreconfigure
theserverandsettheadministratorpasswordagain.
See“DeletetheServerConfiguration
FileandSetaNewAdministratorPassword”onpage 50.
Domainaccount(LDAP)–TouseActiveDirectoryforauthentication,specifythehostandcredentials
thattheACEManagementServerusestoconnecttoandquerythedomaincontroller:
HostName–Enterafullyqualifieddomainname(forexample,ldap.vmware.com)insteadofanIP
addressorhostnamewithnoparentdomainname(forexample,ldap).
QueryUsersAMAcountNameandQueryUserPassword–Usethepasswordandshortnamefor
theuseraccountyoucreatedforthispurposeinActiveDirectory.
QueryUserDomain–ThedomainmustbethedomainforwhichtheLDAPhostisadomain
controller.
AdminGroupDNandHelpDeskGroupDN–(Optional)Enterthedistinguishednameforthese
groups,whichyoucreatedforthispurposeinActiveDirectory(forexample,
cn=Users,dc=simplecorp,dc=com).
Ifthisoptionisnotenabled,anyonewhologsintotheHelpDeskapplicationmustbeamemberof
theACE
Administratorsgroup.
HelpDeskRoleorGroupDN–CreatingaHelpDeskroleallowsyoutopermitcertainuserstoperform
HelpDesktasksfromtheHelpDeskapplication.Usersinthisrolecannotaccessotheradministrative
tools.YoucanstilllogintotheHelpDeskWebapplicationwithyouradministrative
LDAPcredentialsor
localAdministratorpassword.
IfyoumakechangestotheinformationontheAccessControltab,youmustclickApplyorCancelbeforeyou
cannavigatetoanothertab.
Uploading Custom SSL Certificates
TohaveACEManagementServerusecustomSSLcertificates,eitheryourownself‐signedcertificatesorthose
ofathird‐partyorinternalCA(certificateauthority),usetheCustomSSLCertificatestabtouploadthe
PEM‐encodedfiles.
BeforeyoucanuploadcustomSSLcertificates,youmustcreateandrenamethe
certificatefiles.See“Prepare
CustomSecurityCertificates”onpage 32.