Dell Data Protection | Encryption Bedienungsanleitung PDF herunterladen (Seite 38)

38 Enterprise Server Installation and Migration Guide

For the Front End Security Server host name, this relates to the previous dialog’s “Works with Front End...” box. If the box

was selected on the previous dialog, enter the fully qualified domain name for the Dell Security Server. If you have an external

certificate that is being used with APNs, enter the fully qualified domain name specified in the certificate. If the box was not

selected, then the field is not available. Verify that all other fields are populated for component. Leave the default port value

as-is unless there is a conflict with an existing port. Click

NOTE: The Message Broker Service does not allow the “_” (underscore) character in the fully qualified domain name.

In the Security Socket Layer and Host dialog, enter the fully qualified domain name of the back-end server and select the

correct Server edition,

Enterprise Edition

Virtual Edition

You have a choice of SSL types to use. Select option “a” or “b” below:

To use an existing certificate that was purchased from a CA authority, select the first option and click

NOTE: To use this setting, the exported CA certificate being imported must have the full trust chain. If unsure,

re-export the CA certificate and ensure that the following options are selected in the “Certificate Export

Wizard”:



– Personal Information Exchange - PKCS#12 (.PFX)

– Include all certificates in the certification path if possible

– Export all extended properties

Click

Browse

to enter the path to the certificate.

Enter the password associated with this certificate. The key store file must be .p12 or pfx. See How to Export a Certificate

to .PFX Using the Certificate Management Console for instructions.

Click

To create a self-signed certificate, select the

second

option and click

At the

Set Up a Certificate Authority

dialog, enter the following information:

Fully qualified computer name (example: computername.domain.com)

Organizational Unit (example: Security)

Organization

City

State (full name)

Country: Two-letter country abbreviation

Click

At the

Ready to Install the Program

dialog, click

Install

to begin installation.

When prompted, click

Finish

to complete the installation.

Do not reboot the server until Post-Installation Configuration tasks are complete.

Rebooting now would cause the

server to attempt to start

Dell

Services, which would be unsuccessful at this point.

In your backed up installation, copy/paste: <Compatibility Server install dir>\conf\secretKeyStore to the new installation:

<Compatibility Server install dir>\conf\secretKeyStore

In the new installation, open <Compatibility Server install dir>\conf\server_config.xml and replace the

server.pass

value with

the value from the backed up <Compatibility Server install dir>\conf\server_config.xml, as follows:

Instructions for server.pass:

If you know the password

, refer to the example server_config.xml file in Figure 4-1, and make the following changes:

• Edit the

KeyName

from

CFG_KEY

value to

none

• Enter the plain text password and enclose it between

, which in this example is

<value>changeit</value>

When the Dell Enterprise Server starts, the plain text password is hashed, and the hashed value replaces the plain text.

1 2 ... 33 34 35 36 37 38 39 40 41 42 43 ... 79 80

Kommentare zu diesen Handbüchern

Keine Kommentare

Dell Data Protection | Encryption Bedienungsanleitung Seite 38

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Datenbanksoftware Dell Data Protection | Encryption