Windows proxy manager

The Windows proxy manager enables you to install and manage proxies on the Windows host on which the manager is installed. The Windows proxy manager is installed when you install a proxy. For more information, see Installing Windows proxies.

To run the Windows proxy manager

Select Start > Programs > BMC Software > ADDM Proxy > Proxy Manager.
The Windows proxy manager is displayed with a credential and an Active Directory proxy, as shown in the following illustration.

Managing proxies

You can perform the following proxy management tasks from the Windows proxy manager:

  • Create (install a new proxy service)
  • Edit the port and the user account that the proxy uses
  • Delete (uninstall a proxy service)
  • View the log directory for a proxy
  • Start a selected proxy
  • Stop a selected proxy
  • Restart a selected proxy

These are described in the following table:

Task

Button/Menu

Description

Create a new proxy

Alternate text.
or Proxy > Create menu

Click the Create button, or from the corresponding menu:

  1. Enter the following information on the create proxy dialog:
    Name — A name for the proxy
    Type — Select either Active Directory or Credential.
    Port — Enter a port if you need to use a specfic unused port. Otherwise, choose the port which is automatically populated.
    Log on as — Select either Local System or This account.
    If you select Local System, the Windows proxy will run as the Local System user. An Active Directory Proxy running as a Local System user will not have the necessary domain credentials to perform any discovery.
    If you select This account, you must enter the domain and username for the user account that will run the Windows proxy in the domain\username format and the corresponding password.
    Options — Select the check box to run the proxy immediately after installation.
    Register With — Select the appliance for the proxy to register.
  2. To create the new proxy, click OK.
    You are prompted to login to the Create Windows proxy page of the UI with pre-populated proxy details.

    Proxy registration using IPv6

    When registering a proxy with an appliance using IPv6, the proxy IP address that is automatically populated in the Create Windows Proxy page might be a temporary address. The appliance can communicate while the temporary address is valid, but when no longer valid, communication is not possible. This behavior has only been observed in Internet Explorer.

Edit the selected proxy

Alternate text.

  1. Click the Edit button.
    You can edit the following:
    • Port that the proxy uses
    • User account that the proxy runs as
  2. When prompted, confirm the changes by clicking OK.
    Changes in the user account automatically updates the file permissions and restart the proxy service.

Delete the selected proxy

Alternate text.

  1. Click the Delete button.
  2. When prompted, click Yes.

Open Log Directory

Alternate text.

Click the Open Log Directory button. The log directory for the currently selected proxy is displayed in an Explorer window (an example pathname is C:\Program Files\BMC Software\ADDM Proxy\runtime\AD4\log).

Start

Alternate text.

Click the start button. When the proxy starts, a green check icon is displayed next to its name.

Stop

Alternate text.

Click the stop button. When the proxy stops, a red cross icon is displayed next to its name.

Restart

Alternate text.

Click the restart button to stop and start the proxy.

Refresh proxy list

Alternate text.

Click the refresh button to refresh the list. Sometimes the list does not pick up changes in the status of services, so it is good practice to refresh the list before starting or stopping a proxy.

Editing proxy config files is only undertaken through the main user interface

You cannot edit the proxy configuration file as that is better handled centrally from the appliance.

Managing known appliances

Proxy needs the appliance certifcate to enable communication

To enable communication between the proxy and the known appliance, the proxy must have the certificate of the appliance. The certificate can be requested from the add appliance dialog, or the appliance will automatically transfer its certificate for approval.

You can manage the appliances that are permitted to connect to the proxies from the Windows proxy manager.

To manage known appliances, click Edit > Known Appliances. The Known Appliances dialog is displayed which enables you to perform the following tasks:

  • View the known appliances
  • Add new appliances
  • Approve appliances that wish to communicate with the proxy
  • Edit known appliances
  • Delete known appliances

These are described in the following table:

Task

Description

View the known appliances

The Known Appliances dialog displays the available known appliances.

Add new appliance

  1. From the Known Appliances dialog, click the Add a new Appliance address button.
  2. Enter the following information on the Add New Appliance dialog:
    • Address: IP address or DNS name of the new appliance to be added.
  3. Hit enter or click Connect.
  4. To register with the new appliance, click Register.
Approve appliance

Unknown appliances that have contacted the proxy are listed in orange, with a status of Pending Approval

  1. From the Known Appliances dialog, click the appliance to approve
  2. Click the Edit button.
  3. Check the certificate fingerprint, and if the appliance should be approved, click Approve.

If the appliance should not be permitted to connect to the proxy, it may be deleted from the Known Appliances. However, appliances periodically ping the proxies they are configured to use, so unless the appliance in question has been reconfigured to stop trying to use the proxy, the Pending Approval entry will soon be back.

Edit known appliance

  1. From the Known Appliances dialog, click the appliance to edit.
  2. Click the Edit button.
    You can edit the address or name of the appliance.
    In exotic circumstances, you can also manually enter a CA certificate. Click Edit CA Certificate, insert a valid CA Certificate for the selected known appliance, and click Ok.
  3. To save the changes, click OK.

Delete known appliance

  1. From the Known Appliances dialog, click the appliance to delete.
  2. Click the Delete the selected Appliance address button.
  3. When prompted, confirm the action by clicking Yes.

Managing keys and certificates

To manage the proxies' keys and certificates, click Edit > Key and Certificate Management. The Key and Certificate Management dialog is displayed which enables you to perform the following tasks:

  • View the Proxy Key Fingerprint
  • View the Proxy Certificate Fingerprint
  • Generate a new key and certificate
  • Install the legacy key and certificate
  • Show the certificate

These are described in the following table:

Task

Description

View the Proxy Key Fingerprint

The Key and Certificate Management dialog displays Proxy SSL Key Fingerprint.

View the Proxy Certificate Fingerprint

The Key and Certificate Management dialog displays Proxy CA Fingerprint.

Generate new key and certificate

Generates a new key and certificate 

  1. From the Key and Certificate Management dialog, click Generate new key.
  2. When prompted, confirm the action by clicking Yes.

Notes:

  • This operation resets communication with all appliances. You will need to register with these appliances again.
Stop using legacy key

If the proxy is currently using the legacy key and certificate, switch it to use unique keys.

  1. From the Key and Certificate Management dialog, click Stop using legacy key.
  2. When prompted, confirm the action by clicking Yes.

Note: Appliances running BMC Atrium Discovery version 10.1 and later will automatically start accepting the new certificate; older appliances will no longer be able to communicate.

Install legacy key

Switches the proxies to use the legacy key that is used in BMC Atrium Discovery version 10.0 and earlier, so the proxy can be used with those old versions.

  1. From the Key and Certificate Management dialog, click Install legacy key.
  2. When prompted, confirm the action by clicking Yes.

Note: This operation resets communication with all appliances of version 10.1. You will need to register with these appliances again.

Show CA Certificate

From the Key and Certificate Management dialog, click Show Certificate.

The Certificate dialog displays the certificate in a portable format (pem) that might be used for transferring the certificate to the appliance manually.

Additional tasks

You can perform the following additional tasks from the Windows proxy manager:

Task

Menu

Description

Refresh Windows proxy list

View > Refresh

Refreshes the Windows proxy list displayed on the Windows proxy manager.

Open the Service Control Manager

View > Service Control Manager

Opens the Service Control Manager (SCM).

View documentation

Help > Documentation

Displays the Windows proxy manager online documentation.

View Windows proxy manager version

Help > About

Displays the version of the Windows proxy manager.

Exit the Windows proxy manager

Proxy > Exit

Exits the Windows proxy manager.

The Windows proxy manager enables you to perform only the tasks listed on this page. You can perform tasks like adding a Windows proxy to a pool, or configuring advanced proxy settings (for example, configuring the log level, recording mode, discovery methods, purging, and so on) only from the appliance's UI. To learn how to manage the Windows proxies from the appliance's UI, see Managing Windows proxies.

Was this page helpful? Yes No Submitting... Thank you

Comments