To protect against "server impersonation attacks,"  https communication channels from the MSA to vCenter must verify and trust presented certificates. This is a part of overall security tightening policies required by modern enterprise computing. JetStream DR employs certificate management that allows a vCenter certificate trust root to be added to the MSA to force trusted https communication from the MSA.

Certificates must be added to vCenter trust root (vCenter 7.0 U2 and above).

The following certificates must be added to the vCenter trust root to validate the certificate used to sign the OVA:

    • This is an example of an OVA deployed without certificates:

OVA without certificates.

    • This is an example of an OVA deployed with certificates:

OVA with certificates.

Certificates

Manually download JetStream DR certificates.


Certificate Management using the JetStream DR MSA

Certificate Management in vCenter