Configuring External Certificate Authority (ECA)
If remote MSDP servers support ECA, you can configure the plug-in to communicate with remote MSDP server.
For more information on the external CA support, see the NetBackup Security and Encryption Guide.
To configure an ECA
- Ensure that the external certificate files are saved to the local directory on the Oracle server that this plug-in can access.
- Use a text editor to open the
msdp_app.cfgfile.The
msdp_app.cfgfile is available under<plugin installation path>/etc/directory:See ECA msdp_app.cfg file parameters.
For example,
# ECA issue name subjectname="cert subject name" # ECA cert path certpath="cert local path"/cert_chain.pem # ECA private key path privatekeypath="cert local path"/private/key.pem # ECA passphrase file passphrasefile="cert local path"/passphrasefile # ECA certificate for trusted certs truststorepath="cert local path"/trusted/cacerts.pem