Installing the TPP adaptable driver and Bulk Insert utility


Perform this procedure after you have installed the product.

BMC AMI Enterprise Connector for Venafi requires an adaptable driver that communicates with the EC for Venafi gateway at the appropriate times within a TPP certificate life cycle. The driver is a PowerShell script with two support DLLs. You must install these on every TPP server in the cluster.

Important

The PowerShell script is supplied by Venafi. You must contact Venafi to obtain it.

EC for Venafi also includes a Bulk Insert utility, which you can use to create multiple, similar certificate objects, and their associated application objects, by using text files, instead of manually creating the objects one at a time. The Bulk Insert utility is installed at the same time as the TPP adaptable driver.

You must have .NET 6.0 installed on every computer on which you intend to run the Bulk Insert utility.

Best practice
You must install the TPP driver on every server that performs certificate operations or provides the TPP web and REST interfaces. You don't need to install the driver on other servers. However, because the disk space overhead of the driver is small, and its CPU and memory overhead is zero if it isn't used, for simplicity we recommend installing the driver on every server in the cluster.

To install the driver

If you are installing the driver for the first time, you do not need to shut down or restart TPP to perform this procedure. When you download the product software from the EPD website, you receive a zip file.

  1. Unpack the zip file into the EC for Venafi installation directory.
    You will see a folder titled Utilities. Inside Utilities is a folder called ECVenafi SPExxxx that contains some DLLs.
    The ECVenafi SPExxxx folder is specific to your SPE level. For example, if you installed EC for Venafi version 2.3 SPE2407, then the folder is named, ECVenafi SPE2407.
  2. Copy the Utilities folder and its contents into the TPP installation directory on every server in your cluster (by default, C:\Program Files\Venafi).

    Important

    If you installed TPP into a location other than the default, you must edit the line for the $DLLPath in the PowerShell script that you received from Venafi to specify the correct location. For example, if you installed TPP into D:\Venafi, change $DLLPath to read:

    $DLLPath = "D:\Venafi\Utilities\ECVenafi SPExxxx\ECVenafi.dll"

  3. Copy the PowerShell script into the Scripts\AdaptableApp folder on every TPP server.
  4. Verify that the following files are present on each TPP server:
    • Scripts\AdaptableApp\EC for Venafi.ps1
    • Utilities\ECVenafi SPExxxx\ECVenafi.dll
    • Utilities\ECVenafi SPExxxx\Newtonsoft.Json.dll
    • Utilities\ECVenafi SPExxxx\BulkInsert\BulkInsert.exe
    • Utilities\ECVenafi SPExxxx\BulkInsert\BulkInsert.dll
    • Utilities\ECVenafi SPExxxx\BulkInsert\BulkInsert.runtimeconfig.json
  5. Copy the BulkInsert directory and files to the network computer on which you intend to run the utility, if you do not intend to run the utility on the TPP server.

Where to go from here

Configuring-the-TPP-adaptable-driver

Configuring-the-Bulk-Insert-utility

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*