Configuring Veritas InfoScale Operations Manager on Linux using third-party certificates

Last published : Jun 19, 2026
You can configure Veritas InfoScale Operations Manager CMS using third-party certificate only on a Linux host.
Note: Make sure to configure third-party certificates only on afreshinstallation of 7.4.2. It willnotwork on an upgraded CMS.
To configure third-party certificate on Veritas InfoScale Operations Manager
  1. Install the Veritas InfoScale Operations Manager CMS.
See About installing Management Server.
  1. After the installation, open the configuration file:

/opt/VRTSsfmcs/sec/bin/VRTSatlocal.conf

  1. Set the value of the ThirdPartyCertificateUse attribute:
ThirdPartyCertificateUse"=dword:00000001"
  1. Configure Veritas InfoScale Operations Manager.
See Configuring Veritas InfoScale Operations Manager on Linux and Windows.
  1. While you configure Veritas InfoScale Operations Manager, the Certificate Setting panel appears. Enter the Certificate Passphrase for the authentication broker (AB). Confirm Passphrase. This passphrase is used to create the third-party AB certificate.
    Note: Remember this passphrase, as this passphrase is required in the subsequent steps.
  2. Use the key ABPrivateKey.pem to generate an intermediate certificate authority (CA) certificate from your rootCA.
The key is located at:
/var/opt/VRTSsfmcs/sec/root/.VRTSat/profile/certstore/keystore/ABPrivateKey.pem
Intermediate CA certificate should be 2048 bit with sha-256 signature.
The purpose of the certificate should be:
\#openssl x509 -purpose  -noout -in <Certificate_File>
Certificate purposes:
SSL client : Yes
SSL client CA : Yes
SSL server : Yes
SSL server CA : Yes
While generating the certificate signing request (CSR), enter the values as given in the following table:
Attribute Value
Country Name . (Dot)
State or Province Name . (Dot)
Locality Name . (Dot)
Organization Name vx
Organizational Unit Name root@
Common Name broker
Email Address . (Dot)
Country Name (2 letter code) [GB]:.
State or Province Name [England]:.
Locality Name []:.
Organization Name [Alice Ltd]:vx
Organizational Unit Name []:root@\<CMS FQDN\>
Common Name []:broker
Email Address []:.
Note: While you generate the certificate, you are prompted to enter the passphrase. Enter thesamepassphrase that you used while configuring the Veritas InfoScale Operations Manager CMS.
  1. Copy the newly generated AB certificate on your CMS in any directory like /temp.
  2. Copy the rootCA certificate on your CMS in the same directory as in step 7.
  3. Edit /opt/VRTSsfmh/util/config_cms_for_thirdpartycert.pl and set the path:
Root CA certificate file path
my $myroot_ca_cert = "/temp/<Root certificate file name>";
Intermediate CA certificate file path
my $myca_cert = "/temp/<Intermediate certificate file name>";
  1. Run the script:

/opt/VRTSsfmh/bin/perl /opt/VRTSsfmh/util/config_cms_for_thirdpartycert.pl

  1. Verify that the third-party certificate is configured successfully.
openssl s_client -connect <hostname:5634> -showcerts