2.5
Table Of Contents
- VMware vFabric Data Director Administrator and User Guide
- Contents
- About VMware vFabric Data Director Administrator and User Guide
- VMware vFabric Data Director Overview
- Managing Data Director Resources
- Resource Management Overview
- Resource Bundles and Resource Pools
- System Resource Bundle
- Resource Assignment
- vSphere Resource Pools and Data Director
- Viewing Resource Information
- Create the System Resource Pool
- Create the System Resource Bundle
- Monitor Resource Usage
- Create a Resource Pool
- Create a Resource Bundle
- Assign a Resource Bundle to an Organization
- Perform Advanced Cluster Configuration
- Managing Users and Roles
- Building DBVMs and Base DB Templates
- Database Virtual Machine OVA Files
- Deploy a DBVM OVA File
- Build a SLES and Oracle Base Database Virtual Machine
- Build a Custom RHEL and Oracle Database Template
- Deploy the base database VM into the System Resource Pool
- Repackage the Linux ISO Image
- Install Linux on a Blank Virtual Machine
- Initialize the Virtual Machine to Make It Oracle and Data Director Compliant
- Install Oracle 11g R2 Software
- Convert a Base DBVM into a Base DB Template
- Validate a Base DB Template
- Assign a Base DB Template to a Resource Bundle
- Install the Operating System and Database Software in a Blank DBVM
- Requirements for the Kickstart File
- Database Update Configuration
- Configure a vFabric Postgres Update Chain
- Update an Oracle Database
- Identify Existing Target DBVM
- Create a Base Database VM from an Existing Template
- Apply a Patch to the Base Database Virtual Machine
- Convert a Base DBVM into a Base DB Template
- Validate a Base DB Template
- Assign a Base DB Template to a Resource Bundle
- Enable a Base DB Template
- Configure an Oracle Update Chain
- Update a Database
- Managing Organizations
- IP Whitelists
- Managing Database Groups
- Managing Database Templates
- Managing Databases
- Database Lifecycle
- Requirements for Creating Databases
- Database Creation
- Using Tags
- Managing the Organization Catalog
- Batch Operations and Scheduled Tasks
- Updating Databases
- Database Administration
- Cloning Databases
- Managing Database Entities
- Safeguarding Data
- Backup Strategies
- Backup Types
- Backup Template Settings
- Preconfigured Backup Templates
- Select a Database Backup Template
- Schedule Regular Database Backups
- Recover a Database
- Import Backups
- Use VMware Data Recovery to Back Up Data Director
- Database End of Life and Backups
- Perform Point-in-time Recovery of Management Server Database
- Add Pre-Action and Post-Action Scripts to the DBVM for Selected Agents
- Monitoring the Data Director Environment
- Managing Licenses
- IP Pool Management
- VMware vCloud Director Integration
- Reconfiguring Data Director Networks
- Change the vCenter IP Address
- Reconfigure the Web Console Network Mapping or Network Adapter
- Reconfigure the vCenter Network Mapping
- Reconfigure the vCenter Network Adapter Settings
- Reconfigure the DB Name Service Network or DB Name Service Network Adapter
- Reconfigure the Internal Network or Internal Network Adapter Mapping
- Verify Network Settings in Data Director
- Reconfigure the Database Access Network Used by a Database Group
- Modify IP Pool Settings
- Managing SSL Keys and Certificates
- Regenerate Management Server Key and Certificate
- Import Management Server Key and Certificate
- Edit Management Server Certificate
- Regenerate DB Name Server Key and Certificate
- Import DB Name Server Key and Certificate
- Edit DB Name Server Certificate
- Regenerate DBVM Key and Certificate
- Import DBVM Key and Certificate
- Edit DBVM Certificate
- Data Director Troubleshooting
- Index
Managing SSL Keys and Certificates 18
Data Director enables the Secure Sockets Layer (SSL) protocol for all components, including the Management
Server, the DB Name Server, and the DBVM. SSL secures both internal communications among components
and communications from customers who access the database externally.
By default, Data Director generates an SSL key and certificate for all components. System administrators can
replace the automatically generated key and certificate with a custom key and certificate. When you apply a
custom key and certificate, you cannot use the key and certificate that Data Director generated.
All key certificate pairs have a period of validity. The automatically generated pair expires after five years. To
ensure continued security of data and communications, system administrators must update certificates before
they expire.
Data Director currently supports only RSA keys and X509-formatted certificates. Supported keystore types
include JKS, JCEKS, and PCKS12.
This chapter includes the following topics:
n
“Regenerate Management Server Key and Certificate,” on page 181
n
“Import Management Server Key and Certificate,” on page 182
n
“Edit Management Server Certificate,” on page 183
n
“Regenerate DB Name Server Key and Certificate,” on page 183
n
“Import DB Name Server Key and Certificate,” on page 184
n
“Edit DB Name Server Certificate,” on page 184
n
“Regenerate DBVM Key and Certificate,” on page 185
n
“Import DBVM Key and Certificate,” on page 185
n
“Edit DBVM Certificate,” on page 186
Regenerate Management Server Key and Certificate
System administrators can regenerate the Management Server SSL key and certificate before it expires, to
ensure continuous security of communications.
Prerequisites
Verify that no custom key and certificate has been applied to the Management Server.
Procedure
1 Click System Settings.
2 Expand Other Settings and click Security.
VMware, Inc.
181