Starting with PowerStoreOS 3.5, you can implement a third-party certificate for the PowerStore VASA provider. You can replace the system’s self-signed certificate with the third-party certificate, or you can retain the system’s self-signed certificate and also add a third-party certificate. Implementing a third-party certificate for the PowerStore VASA provider allows for support of multiple standalone vCenter instances to leverage a single PowerStore VASA provider.

• To view or implement a third-party certificate for VASA directly from PowerStore Manager, go to Settings and select VASA Certificate under the Security section, as shown in the following figure.

Figure 9.   Import third-party VASA certificate

Under VASA Certificate, you have the option to retain the current VASA certificate, whether it is a self-signed PowerStore certificate, a third-party signed certificate, or a vCenter certificate. If enabled, the retain option prevents the VASA server certificate on the PowerStore system from being overwritten by the vCenter server.

To implement a third-party certificate for VASA, follow these steps:

1. In PowerStore Manager, go to Settings > VASA Certificate.
2. Click Generate CSR and provide the following information to generate a Certificate Signing Request (CSR):

• Common Name
• IP Address
• Organization
• Organizational Unit
• Locality
• State
• Country / Region

3. Have the CSR request shown in Figure 10 signed by a third-party Certificate Authority.
4. Click Import to import the signed certificate into PowerStore Manager.

Note: Ensure that the vCenter server trusts the CA of the certificate being imported; otherwise, VASA functionality, including the management of a vVol VM, will be unavailable.

Figure 10.    Generate CSR request for VASA