Updated on 2022-09-16 GMT+08:00

Managing Certificates

You can import, view, and delete certificates on eBackup in a unified manner.

Obtaining Certificates

Obtain certificates preferentially from the O&M personnel of the corresponding products. If certificates have not been obtained, obtain them by referring to the following steps. If certificates cannot be obtained, contact Huawei technical support.

VMware CA certificate

Use a web browser to log in to the VMware vCenter environment and download the certificate package to a local directory.

After the package is downloaded, change the file name extension to .zip and open the package. Find the file of *.0 format and change its file name extension to *.crt.

During certificate import, set the VMware certificate type to Protected environment.

Importing Certificates

  1. On the navigation bar, choose > Certificate.
  2. Click Import.

    If eBackup and interconnected devices communicate using HTTPS, you are advised to import a valid CA certificate. Or, eBackup will fail to authenticate the interconnected devices, resulting in security risks.

  3. Select the type of the certificate to be imported.
    • Protected environment: If eBackup and protected environments communicate using HTTPS, import a valid certificate to authenticate the protected environments. Obtain the certificate from a protected environment administrator.

      Import the new CA certificates.

    • S3 storage: If S3 storage units are used to store backup management data and communicate with eBackup using HTTPS, import a valid certificate to authenticate the storage units. Obtain the certificate from a storage device administrator.
    • Email server: If SSL needs to be enabled for email notification, import a CA certificate of an SMTP server. eBackup uses the certificate to authenticate email servers. Obtain the certificate from the administrator of the SMTP server.
    • FTP server: If a Manager communicates with an FTP server using FTPS, import a valid certificate to enable the Manager to authenticate the FTP server. Obtain the certificate from the administrator of the FTP server.
  4. Click , select the certificate to be imported, and click Upload.
  5. Click OK.

Viewing Certificates

  1. On the navigation bar, choose > Certificate.
  2. On the Certificate page, view imported certificates. Table 1 describes the details.
    Table 1 Certificate details

    Parameter

    Description

    Fingerprint

    Mark used to identify a certificate

    Issued To

    Holder of the certificate

    Issued By

    Certificate authority that issues the certificate

    Type

    Type of the certificate. The value can be Protected environment, S3 storage, or Email.

    Description

    Description of the certificate

    Creation Time

    Time when the certificate is applied for

    Certificate Expiration Time

    Time when the certificate expires. The expiration time is confirmed after the certificate is issued.

Deleting Certificates

Delete unnecessary or expired certificates.

  1. On the navigation bar, choose > Certificate.
  2. Select the certificate to be deleted and click .
  3. Read displayed information and click OK.