6.1
Table Of Contents
- Site Recovery Manager Security
- Contents
- About VMware Site Recovery Manager Security
- Updated Information
- Site Recovery Manager Security Reference
- Site Recovery Manager Services
- Site Recovery Manager Network Ports
- Site Recovery Manager Configuration Files
- Site Recovery Manager Certificates and Keys
- Site Recovery Manager License and EULA Files
- Site Recovery Manager Log Files
- Site Recovery Manager Accounts
- Site Recovery Manager Security Updates and Patches
- Best Practices For Securing Site Recovery Manager Server
- Index
Site Recovery Manager Configuration Files
Some Site Recovery Manager configuration files contain settings that might affect the security of your
environment. Improper settings can also impact the proper functioning of your Site Recovery Manager
environment.
Table 1‑2. Site Recovery Manager Configuration Files
File or Directory Location Description
installation_folder\VMware\VMware vCenter Site
Recovery Manager\config\vmware-dr.xml
Defines system configuration of
Site Recovery Manager Server.
NOTE Do not move, or delete the configuration file.
You can safely change the system settings of a
Site Recovery Manager instance by using the Advanced
Settings tab on the Manage page in the
vSphere Web Client user interface.
installation_folder\VMware\VMware vCenter Site
Recovery Manager Embedded
Database\bin\vmw_vpg_config\
Contains embedded database configuration files.
NOTE Do not modify, move, or delete the configuration
file.
installation_folder\VMware\VMware vCenter Site
Recovery Manager\config\extension.xml
Defines configuration of Site Recovery Manager Server
Extension. The extension.xml file contains definitions of
default user roles and their privileges.
NOTE Do not modify, move, or delete the configuration
file.
Site Recovery Manager Certificates and Keys
Site Recovery Manager uses TLS certificates and private keys to protect network communication and
securely establish authentication with other servers.
CA certificate or private key or both Location and Description
TLS certificate and key for
Site Recovery Manager Server
endpoint
Windows Certificate Store and in the installation_folder\VMware\VMware
vCenter Site Recovery Manager\bin\SRM_Server_IP_addressca.p12
file.
Site Recovery Manager generates the certificate if you do not provide a custom
certificate during the installation.
TLS certificate and key for solution
user created during
Site Recovery Manager installation
installation_folder\VMware\VMware vCenter Site Recovery
Manager\bin\SRM_Server_IP_addresssu.p12 file.
Chapter 1 Site Recovery Manager Security Reference
VMware, Inc. 11