6.2

Replacing the Default Certificates 10
By default, the vRealize Operations for Published Applications adapter and the broker agent use self-signed
certificates for authentication and data encryption. For increased security, you can replace the default self-
signed certificates with certificates that are signed by a certificate authority.
This chapter includes the following topics:
n
“Replace the Default Certificate for the vRealize Operations for Published Applications Adapter,” on
page 47
n
“Replace the Default Certificate for the Broker Agent,” on page 49
Replace the Default Certificate for the
vRealize Operations for Published Applications Adapter
A self-signed certificate is generated when you first install the
vRealize Operations for Published Applications adapter. The desktop message server and the broker
message server use this certificate by default to authenticate to the agents. You can replace the self-signed
certificate with a certificate that is signed by a valid certificate authority.
Prerequisites
n
Verify that you can connect to the node where the vRealize Operations for Published Applications
adapter is running.
n
Verify that you have the password for certificate store. You can obtain the password from the
msgserver.properties file. See “vRealize Operations for Published Applications Adapter Certificate
and Trust Store Files,” on page 45.
n
Become familiar with the Java keytool utility. Documentation is available at http://docs.oracle.com.
Procedure
1 Log in to the node where the vRealize Operations for Published Applications adapter is running.
2 Navigate to the vRealize Operations for Published Applications adapter's work directory.
Platform Directory Location
Linux
/usr/lib/vmware-
vcops/user/plugins/inbound/V4PA_adapter3/work
Windows
C:\vmware\vcenteroperations\user\plugins\inbound\V4PA_adapt
er3\work
VMware, Inc.
47