Job Management Partner 1/Performance Management - Agent Option for Virtual Machine Description, User's Guide and Reference

[Contents][Glossary][Index][Back][Next]


2.5.1 For VMware

When the virtual environment to be monitored is VMware, you can use SSL to encrypt communications between PFM - Agent for Virtual Machine and the virtual environment. If you use SSL to communicate with the virtual environment, acquire a certificate by referencing the appropriate VMware technical note listed below, and then embed the certificate in the VMware and PFM - Agent hosts:

In the case of VMware ESX 3.5, you can also use the default certificate that is created in VMware.

If you use the default certificate in VMware ESX 3.5, perform the procedure described below.

Organization of this subsection
(1) How to obtain the default certificate for VMware ESX 3.5
(2) Importing the default certificate for VMware ESX 3.5

(1) How to obtain the default certificate for VMware ESX 3.5

This subsection explains how to use Internet Explorer 6 or Internet Explorer 7 to obtain a certificate. The following explanation assumes that a certificate has already been created on the VMware side, and has already been installed in a browser.

For details about how to create a certificate on the VMware side, see the VMware documentation. For details about how to install a certificate in a browser, see the browser's online Help.

(a) Using Internet Explorer 6

To obtain a VMware certificate using Internet Explorer 6:

  1. From Internet Explorer 6, access https://vm-host.
    For vm-host, enter the host name of the monitored host. This explanation uses vm-host as an example.

    [Figure]

  2. Double-click the [Figure] icon (SSL certificate) displayed in the bottom right corner of the browser window.
    The Certificate dialog box opens.

    [Figure]

  3. Choose the Details tab and click Copy to File.
    The Certificate Export Wizard dialog box opens.

    [Figure]

  4. Click Next.

    [Figure]

  5. Select DER encoded binary X.509 (.CER), and then click Next.

    [Figure]

  6. In the File name text box, enter the file name under which to save the certificate, and then click Next.
    Here, C:\VM_Host.cer is entered as an example.

    [Figure]

  7. Click Finish.

    [Figure]

  8. Click OK.

(b) Using Internet Explorer 7

To obtain a VMware certificate using Internet Explorer 7:

  1. From Internet Explorer 7, access https://vm-host.
    For vm-host, enter the host name of the monitored host. This explanation uses vm-host as an example.

    [Figure]

  2. Click the [Figure] icon (SSL certificate) displayed to the right of the address bar.
    The Website Identification pull-down menu is displayed.

    [Figure]

  3. Click View certificates.
    The Certificate dialog box opens.

    [Figure]

  4. Choose the Details tab and click Copy to File.
    The Certificate Export Wizard dialog box opens.

    [Figure]

  5. Click Next.

    [Figure]

  6. Select DER encoded binary X.509 (.CER), and then click Next.

    [Figure]

  7. In the File name text box, enter the file name under which to save the certificate, and then click Next.
    Here, C:\VM_Host.cer is entered as an example.

    [Figure]

  8. Click Finish.

    [Figure]

  9. Click OK.

(2) Importing the default certificate for VMware ESX 3.5

To import a certificate:

  1. In Windows, choose Start and then Run.
    The Run dialog box opens.

    [Figure]

  2. In the Run dialog box, enter mmc and click OK.
    Management Console starts.

    [Figure]

  3. In Console1, choose File and then Add/Remove Snap-in.
    The Add/Remove Snap-in dialog box opens.

    [Figure]

  4. Click Add.
    The Add Standalone Snap-in dialog box opens.

    [Figure]

  5. From Available Standalone Snap-ins, choose Certificates and then click Add.
    The Certificates snap-in dialog box opens.

    [Figure]

  6. Choose Computer account and then click Next.
    The Select Computer dialog box opens.

    [Figure]

  7. Choose Local computer and click Finish.

    [Figure]

  8. In the Add Standalone Snap-in dialog box, click Close.

    [Figure]

  9. In the Add/Remove Snap-in dialog box, click OK.

    [Figure]

  10. In Console1, choose Console Root from the left pane and then Certificates (Local computer).

    [Figure]

  11. In the right pane of Console1, right-click Trusted Root Certification Authorities, then All Tasks and Import.
    The Certificate Import Wizard dialog box opens.

    [Figure]

  12. Click Next.

    [Figure]

  13. In the File name text box, enter the file name under which to save the certificate, and then click Next.

    [Figure]

  14. Choose Place all certificates in the following store, and then click Next.

    [Figure]

  15. Click Finish.

    [Figure]

  16. Click OK.

[Contents][Back][Next]


[Trademarks]

All Rights Reserved. Copyright (C) 2009, 2010, Hitachi, Ltd.