childebrandt42

Today companys are growing more and more security aware and paying more attention to the fine details, there is a growing demand for hardening applications. On that journey i had noticed that AppVolumes web console uses HTTP and HTTPs for authentication. So if you choose you can log into AppVolumes manager on HTTP. There is no little check box or setting to change to remove this option. But i did find a great KB article for that:

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2095972

This article explains how to turn off port 80 for the AppVolumes Manager.

The article below is linked inside this KB on how to move your clients from using 80 to 443.

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2091589

And the last one that is also referenced is how to replace the default SSL cert and generate a CSR.

https://kb.vmware.com/selfservice/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&externalId=2095969

This was more or less just a quick blog post to let people know there is a solution out there for this.