5.5

Table Of Contents
Procedure
1 Connect to the VAMI of the vSphere Replication appliance in a Web browser.
The URL for the VAMI is https://vr-appliance-address:5480.
You can also access the VAMI by clicking Configure VR Appliance in the Summary tab in the
vSphere Replication view of the SRM interface.
2 Type the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
3 (Optional) Click the VR tab and click Security to review the current SSL certificate.
4 Click Configuration.
5 (Optional) To enforce verification of certificate validity, select the Accept only SSL certificates signed
by a trusted Certificate Authority check box.
See “vSphere Replication Certificate Verification,” on page 58 for details of how vSphere Replication
handles certificates.
6 Generate or install a new SSL certificate.
Option Action
Generate a self-signed certificate
Click Generate and Install. Using a self-signed certificate provides trust by
thumbprint only and might not be suitable for environments that require
high levels of security. You cannot use a self-signed certificate if you
selected Accept only SSL certificates signed by a trusted Certificate
Authority.
Upload a certificate
Click Browse to select a PKCS#12 certificate and click Upload and Install.
Public key certificates must meet certain requirements. See “Requirements
When Using a Public Key Certificate with vSphere Replication,” on
page 59.
7 Click Save and Restart Service to apply the changes.
You changed the SSL certificate and optionally changed the security policy to use trust by validity and
certificates signed by a certificate authority.
NOTE If you change the SSL certificate, the vSphere Replication status changes to disconnected. Validate the
certificate to reconnect the source and target sites before replicating a virtual machine.
vSphere Replication Certificate Verification
vSphere Replication verifies the certificates of vCenter Server and remote vSphere Replication servers.
All communication between vCenter Server, the local vSphere Replication appliance, and the remote
vSphere Replication appliance goes through a vCenter Server proxy at port 80. All SSL traffic is tunnelled.
Site Recovery Manager Installation and Configuration
58 VMware, Inc.