For added security, we recommend adding an SSL certificate to the VMware Aria Operations truststore for your HPE 3PAR StoreServ host server.
Different levels of security can be configured in the Management Pack. The least secure configuration is to set the SSL Config Advanced Setting to No SSL. The next level of security is to set SSL Config to No Verify, and the Management Pack will accept all SSL certificates. For the highest level of security, you can set SSL Config to Verify, and the Management Pack will have to verify the SSL certificate on your VMware Aria Operations system. See: Creating an Adapter Instance.
To add the SSL certificate to your VMware Aria Operations truststore:
Obtain the SSL certificate for your HPE 3PAR StoreServ host server from your Internet browser. Export the certificate as an X.509 Certificate (PEM).
Copy the certificate to your VMware Aria Operations machine.
Use ‘ssh’ to log in to the VMware Aria Operations machine as the root user, then run the following command:
$VCOPS_BASE/jre/bin/keytool -import -alias <product_alias> -file /tmp/<certfile> -keystore “$VCOPS_DATA_VCOPS/user/conf/ssl/tcserver.truststore” -storepass <truststore_password> -trustcacerts
%VCOPS_BASE%\jre\bin\keytool -import -alias <product_alias> C:\path\to\certfile -keystore “%VCOPS_DATA_VCOPS%\user\conf\ssl\tcserver.truststore” -storepass <truststore_password> -trustcacertsImportant:
The <truststore_password> is generated by VMware Aria Operations and is located in/storage/vcops/user/conf/ssl/storePass.properties. Copy the password from thessltruststorePassword= field and paste it in the <truststore_password> placeholder.
-alias is a unique name for each key that you add (per host)
certfile is the location where the cert file was saved
Run the reboot command to re-start the VMware Aria Operations machine for the changes to take effect.