6.3

Table Of Contents
Procedure
u
Start the registration process by running the setup command that is appropriate for the operating
system on which the agent is running.
Operating System Run Command
Linux
ep-agent.sh setup
Windows
ep-agent.bat setup
The agent installer runs the setup, requests a new certicate from the server, and imports the new certicate
to the keystore.
Securing Communications with the Server
Communication from an Endpoint Operations Management agent to the vRealize Operations Manager
server is unidirectional, however both parties must be authenticated. Communication is always secured
using transport layer security (TLS).
The rst time an agent initiates a connection to the vRealize Operations Manager server following
installation, the server presents its SSL certicate to the agent.
If the agent trusts the certicate that the server presented, the agent imports the server's certicate to its own
keystore.
The agent trusts a server certicate if that certicate, or one of its issuers (CA) already exists in the agent's
keystore.
By default, if the agent does not trust the certicate that the server presents, the agent issues a warning. You
can choose to trust the certicate, or to terminate the conguration process. The
vRealize Operations Manager server and the agent do not import untrusted certicates unless you respond
yes to the warning prompt.
You can congure the agent to accept a specic thumb print without warning by specifying the thumb print
of the certicate for the vRealize Operations Manager server.
By default, the vRealize Operations Manager server generates a self-signed CA certicate that is used to sign
the certicate of all the nodes in the cluster. In this case, the thumbprint must be the thumbprint of the
issuer, to allow for the agent to communicate with all nodes.
As a vRealize Operations Manager administrator, you can import a custom certicate instead of using the
default. In this instance, you must specify a thumbprint corresponding to that certicate as the value of this
property.
Either the SHA1 or SHA256 algorithm can be used for the thumbprint.
Launching Agents from a Command Line
You can launch agents from a command line on both Linux and Windows operating systems.
Use the appropriate process for your operating system.
If you are deleting the data directory, do not use Windows Services to stop and start an Endpoint Operations
Management agent. Stop the agent using epops-agent.bat stop. Delete the data directory, then start the
agent using epops-agent.bat start.
Chapter 7 Connecting vRealize Operations Manager to Data Sources
VMware, Inc. 67