5.5

Table Of Contents
n
vSphere Replication accepts MD5 and SHA1 signatures, but VMware recommends that you use
SHA256 signatures.
n
vSphere Replication does not accept RSA or DSA certificates with 512-bit keys. vSphere Replication
requires at least 1024-bit keys. VMware recommends using 2048-bit public keys. vSphere Replication
shows a warning if you use a 1024-bit key.
Change the Password of the vSphere Replication Appliance
You set the password of the vSphere Replication appliance when you deploy the appliance. You can change
the password after installation by using the virtual appliance management interface (VAMI).
Prerequisites
n
Verify that the vSphere Replication appliance is powered on.
n
You must have administrator privileges to configure the vSphere Replication appliance.
Procedure
1 Connect to the VAMI of the vSphere Replication appliance in a Web browser.
The URL for the VAMI is https://vr-appliance-address:5480.
You can also access the VAMI by clicking Configure VR Appliance in the Summary tab in the
vSphere Replication view of the SRM interface.
2 Type the root user name and password for the appliance.
You configured the root password during the OVF deployment of the vSphere Replication appliance.
3 Click the VR tab and click Security.
4 Type the current password in the Current Password text box.
5 Type the new password in the New Password and the Confirm New Password text boxes.
The password must be a minimum of eight characters. vSphere Replication does not support blank
passwords.
6 Click Apply to change the password.
Change Keystore and Truststore Passwords of the vSphere Replication
Appliance
To increase security, you can change the default passwords of the vSphere Replication appliance keystore
and truststore. If you copy the keystores from the appliance to another machine, VMware recommends that
you change the passwords before the copy operation.
The keystore and truststore passwords might be stored in an access restricted config file.
vSphere Replication has the following keystores:
n
/opt/vmware/hms/security/hms-keystore.jks, which contains the vSphere Replication appliance
private key and certificate.
n
/opt/vmware/hms/security/hms-truststore.jks, which contains additional CA certificates besides the
ones that Java already trusts.
Procedure
1 To change the hms-keystore.jks password, log in as root.
Site Recovery Manager Installation and Configuration
60 VMware, Inc.