You can install certificates, signed with the SHA-1 hashing function in the Site Recovery Manager Appliance in case your environment requires it.

By default, the Site Recovery Manager server rejects installation of new certificates, which are signed with the SHA-1 hashing function. To install a certificate, signed with the SHA-1 hashing function, you must enable it in the Site Recovery Manager Appliance.

Procedure

  1. Establish an SSH connection to the Site Recovery Manager Appliance.
  2. Navigate to the /opt/vmware/srm/conf/ folder and open the vmware-dr.xml and the drconfig.xml files in a text editor.
  3. Find the <connections> section and add a <allowSha1> section.
    <connections>
       <allowSha1>true</allowSha1>
    </connections>
  4. Save the files and restart the Site Recovery Manager Server service.
  5. Use the following command to restart the dr-configurator service.
    sudo systemctl restart dr-configurator