Managing Certificates

Obtaining Certificates

Obtain certificates preferentially from the O&M personnel of the corresponding products. If certificates have not been obtained, obtain them by referring to the following steps. If certificates cannot be obtained, contact Huawei technical support.

VMware CA certificate

Use a web browser to log in to the VMware vCenter environment and download the certificate package to a local directory.

After the package is downloaded, change the file name extension to .zip and open the package. Find the file of *.0 format and change its file name extension to *.crt.

During certificate import, set the VMware certificate type to Protected environment.

Importing Certificates

1. On the navigation bar, choose > Certificate.
2. Click Import.

   If eBackup and interconnected devices communicate using HTTPS, you are advised to import a valid CA certificate. Or, eBackup will fail to authenticate the interconnected devices, resulting in security risks.

3. Select the type of the certificate to be imported.
   • Protected environment: If eBackup and protected environments communicate using HTTPS, import a valid certificate to authenticate the protected environments. Obtain the certificate from a protected environment administrator.

     Import the new CA certificates.

   • S3 storage: If S3 storage units are used to store backup management data and communicate with eBackup using HTTPS, import a valid certificate to authenticate the storage units. Obtain the certificate from a storage device administrator.
   • Email server: If SSL needs to be enabled for email notification, import a CA certificate of an SMTP server. eBackup uses the certificate to authenticate email servers. Obtain the certificate from the administrator of the SMTP server.
   • FTP server: If a Manager communicates with an FTP server using FTPS, import a valid certificate to enable the Manager to authenticate the FTP server. Obtain the certificate from the administrator of the FTP server.
4. Click , select the certificate to be imported, and click Upload.
5. Click OK.

Viewing Certificates

1. On the navigation bar, choose > Certificate.
2. On the Certificate page, view imported certificates. Table 1 describes the details.

   Table 1 Certificate details

   Parameter	Description
   Fingerprint	Mark used to identify a certificate
   Issued To	Holder of the certificate
   Issued By	Certificate authority that issues the certificate
   Type	Type of the certificate. The value can be Protected environment, S3 storage, or Email.
   Description	Description of the certificate
   Creation Time	Time when the certificate is applied for
   Certificate Expiration Time	Time when the certificate expires. The expiration time is confirmed after the certificate is issued.

Deleting Certificates

Delete unnecessary or expired certificates.

1. On the navigation bar, choose > Certificate.
2. Select the certificate to be deleted and click .
3. Read displayed information and click OK.