5.5

Table Of Contents
6 Click Apply to change the password.
Change Keystore and Truststore Passwords of the
vSphere Replication Appliance
To increase security, you can change the default passwords of the vSphere Replication appliance
keystore and truststore. If you copy the keystores from the appliance to another machine, VMware
recommends that you change the passwords before the copy operation.
The keystore and truststore passwords might be stored in an access restricted config file.
vSphere Replication has the following keystores:
n
/opt/vmware/hms/security/hms-keystore.jks, which contains the vSphere Replication
appliance private key and certificate.
n
/opt/vmware/hms/security/hms-truststore.jks, which contains additional CA certificates
besides the ones that Java already trusts.
Procedure
1 To change the hms-keystore.jks password, log in as root.
2 Obtain the current hms-keystore password.
# /opt/vmware/hms/hms-configtool -cmd list | grep keystore
Example of the output hms-keystore-password = old_password
3 Change the hms-keystore password.
# /usr/java/default/bin/keytool -storepasswd -storepass old_password -new new_password -
keystore /opt/vmware/hms/security/hms-keystore.jks
4 Change the vSphere Replication appliance private key password.
# /usr/java/default/bin/keytool -keypasswd -alias jetty -keypass
old_password -new new_password -storepass new_password -keystore
/opt/vmware/hms/security/hms-keystore.jks
5 Update the configuration with the new password.
/opt/vmware/hms/hms-configtool -cmd reconfig -property
'hms-keystore-password=new_password'
6 Reboot the appliance for the changes to take effect.
# reboot
7 To change the hms-truststore.jks password, log in as root.
VMware vSphere Replication Administration
VMware, Inc. 48