Posts tagged "certificates"

9 posts

Generating vCenter Solution User Certificates With Custom Names

Sep 28, 2018

Many enterprises require replacing all vCenter certificates with Enterprise CA trusted certificates. vSphere 6.5 has made the certificate updating process so much easier than the complication of the vSphere 5.x days. Basic vCenter now has a single Machine SSL certificate as well as four Solution user certificates: machine (different from machine SSL), vpxd, vpxd-extension, vsphere-webclient. Al...

Read more...
What's New in vSphere 6.0: Certificate Management

Feb 2, 2015

_VMware has finally officially announced what is to be included in vSphere 6.0 after lifting the lid on parts of the update during VMworld 2014 keynotes and sessions._ _See my introductory post: ( for details of all the components._ VMware is at last tackling the nightmware of managing vSphere certificates in a more holistic way. Things were relatively simple until VMware started splitting up t...

Read more...
vSphere 5 Certificates: 4 - Replacing the default vCenter 5 Server Certificate

Feb 28, 2012

This is part 4 of a 7 part post on managing vSphere 5 Certificates: 1. ( 2. ( 3. ( 4. ( 5. ( 6. ( 7. ( vCenter Server actually has three different components which need their certificates updated, ( ( and ( Initially I had only written the vCenter Server certificate steps but luckily ( (VCDX #66) keeps me on my toes and I've now added parts for the other two components. You should have now ( fi...

Read more...
vSphere 5 Certificates: 5 - Replacing the default vCenter 5 Web Client Server Certificate

Feb 28, 2012

This is part 5 of a 7 part post on managing vSphere 5 Certificates: 1. ( 2. ( 3. ( 4. ( 5. ( 6. ( 7. ( vCenter Server actually has three different components which need their certificates updated, ( ( and ( Initially I had only written the vCenter Server certificate steps but luckily ( (VCDX #66) keeps me on my toes and I've now added parts for the other two components. You should have now ( fi...

Read more...
vSphere 5 Certificates: 6 - Replacing the default vCenter 5 Inventory Service Certificate

Feb 28, 2012

This is part 6 of a 7 part post on managing vSphere 5 Certificates: 1. ( 2. ( 3. ( 4. ( 5. ( 6. ( 7. ( vCenter Server actually has three different components which need their certificates updated, ( ( and ( Initially I had only written the vCenter Server certificate steps but luckily ( (VCDX #66) keeps me on my toes and I've now added parts for the other two components. You should have now ( fi...

Read more...
vSphere 5 Certificates: 1 - Installing a Root Certificate Authority

Nov 30, 2011

Updated: 27 February 2012 to include vCenter 5 Web Client Server and vCenter 5 Inventory Service This is the first part of a 7 part post on vSphere 5 Certificates: 1. ( 2. ( 3. ( 4. ( 5. ( 6. ( 7. ( The posts will take you through building your own certificate trusting infrastructure and distributing the certificates, creating your own vCenter and Update Manager certificates which can also incl...

Read more...
vSphere 5 Certificates: 2 - Distributing the Root CA certificate to clients

Nov 30, 2011

This is part 2 of a 7 part post on managing vSphere 5 Certificates: 1. ( 2. ( 3. ( 4. ( 5. ( 6. ( 7. ( The posts will Once you have ( you may need to distribute the root certificate to clients. The root CA certificate needs to be in the Trusted Root Certification Authorities certificate store on all clients who need to access vCenter for the certificate trust chain to work. If you are not using...

Read more...
vSphere 5 Certificates: 3 - Creating the default vCenter 5 Server Certificate and including a DNS alias

Nov 30, 2011

This is part 3 of a 7 part post on managing vSphere 5 Certificates: 1. ( 2. ( 3. ( 4. ( 5. ( 6. ( 7. ( You should now have a ( so you can proceed with creating certificates for vCenter 5 which will be trusted by this root CA certificate. These steps will also allow you to create DNS aliases for your certificate if you need them so you can connect to your vCenter server using any of the aliases...

Read more...
vSphere 5 Certificates: 7 - Replacing the default Update Manager 5 Server Certificate

Nov 30, 2011

This is the final post of a 7 part post on managing vSphere 5 Certificates: 1. ( 2. ( 3. ( 4. ( 5. ( 6. ( 7. ( VMware Update Manager uses a different self-signed certificate to authenticate against vCenter Server which also needs to be replaced. You can use the same vCenter certificate if the Update Manager installation is on the same server as vCenter or create and trust a new certificate usin...

Read more...