Changing the Port Used by Anti-Virus for VMware Tanzu and Anti-Virus Mirror

This topic tells you how to change the port used by Anti-Virus for VMware Tanzu and Anti-Virus Mirror for VMware Tanzu.

If you are upgrading from Anti-Virus v2.0 and you use Anti-Virus Mirror for VMware Tanzu, you might need to follow the procedure in this topic. For more information about whether to follow this procedure, see Configuring the Mirror Port.

Note: If you are not using the Anti-Virus Mirror tile, you can configure your existing mirror by specifying a PORT, HOST, or HOST:PORT in the Anti-Virus tile. For more information, see Configure Anti-Virus.

Overview

Anti-Virus Mirror uses mutual TLS (mTLS). The port used by Anti-Virus Mirror and Anti-Virus must be the same. If the port number configured in both tiles is not the same, Anti-Virus database updates and deployments fail.

To change the port used by Anti-Virus and Anti-Virus Mirror you must:

1. Change the Port in the Anti-Virus Mirror Tile
2. Change the Port in the Anti-Virus Tile
3. Exclude Anti-Virus Mirror during Apply Changes
4. Remove the Exclusion

Change the Port in the Anti-Virus Mirror Tile

To change the port number in the Anti-Virus Mirror tile:

1. Navigate to the Ops Manager Installation Dashboard and click the Anti-Virus Mirror for VMware Tanzu tile.
2. Click Anti-Virus Mirror Configuration.

3. Enter a port number into Anti-Virus Mirror Port. The default value is 6501.

   

4. Return to the Ops Manager Installation Dashboard.

Change the Port in the Anti-Virus Tile

To change the port number in the Anti-Virus tile:

1. Navigate to the Ops Manager Installation Dashboard and click the Anti-Virus for VMware Tanzu tile.
2. Click Anti-Virus Configuration.
3. Under Mirror for Automatic Database Updates, ensure that Deployed mirror from the Anti-Virus Mirror for VMware Tanzu Tile is selected.
4. Enter the same port number you entered in the above step into Anti-Virus Mirror Port.

Exclude Anti-Virus Mirror during Apply Changes

When changing ports for the Anti-Virus and Anti-Virus Mirror tiles, you need to exclude the antivirus-mirror instance group from the Anti-Virus deployment during the first Apply Changes for the Anti-Virus port. Excluding the antivirus-mirror instance group ensures that Anti-Virus is not deployed on the mirror while the ports are being changed.

After the first Apply Changes is complete, you remove the exclusion and Apply Changes again, this time for the entire foundation.

To exclude the instance group and complete the port changes:

1. In the Anti-Virus for VMware Tanzu tile, click Anti-Virus Configuration.

2. Exclude the antivirus-mirror instance group by adding it to List of instance group names that will be excluded from deployment.

   

3. Return to the Ops Manager Installation Dashboard and click Review Pending Changes.

4. Unselect all products except BOSH Director, Anti-Virus, and Anti-Virus Mirror.
5. Click Apply Changes.

Remove the Exclusion

To remove the antivirus-mirror exclusion:

1. When the Apply Changes is complete, return to the Anti-Virus for VMware Tanzu tile.
2. Remove the antivirus-mirror exclusion added above.
3. Return to the Ops Manager Installation Dashboard and click Review Pending Changes.
4. Ensure all product are selected.
5. Click Apply Changes.