Replacing Default Vcenter Server Certificates with signed by a CCA

<div dir="ltr" style="text-align&colon; left&semi;"><&excl;--[if gte mso 9]><xml> <o&colon;OfficeDocumentSettings> <o&colon;AllowPNG/> </o&colon;OfficeDocumentSettings></xml><&excl;[endif]--><br /><&excl;--[if gte mso 9]><xml> <w&colon;WordDocument> <w&colon;View>Normal</w&colon;View> <w&colon;Zoom>0</w&colon;Zoom> <w&colon;TrackMoves/> <w&colon;TrackFormatting/> <w&colon;PunctuationKerning/> <w&colon;ValidateAgainstSchemas/> <w&colon;SaveIfXMLInval>false</w&colon;SaveIfXMLInvalid> <w&colon;IgnoreMixedContent>false</w&colon;IgnoreMixedContent> <w&colon;AlwaysShowPlaceholderText>false</w&colon;AlwaysShowPlaceholderText> <w&colon;DoNotPromoteQF/> <w&colon;LidThemeOther>EN-GB</w&colon;LidThemeOther> <w&colon;LidThemeAsian>X-NONE</w&colon;LidThemeAsian> <w&colon;LidThemeComplexScript>X-NONE</w&colon;LidThemeComplexScript> <w&colon;Compatibility> <w&colon;BreakWrappedTables/> <w&colon;SnapToGridInCell/> <w&colon;WrapTextWithPunct/> <w&colon;UseAsianBreakRules/> <w&colon;DontGrowAutofit/> <w&colon;SplitPgBreakAndParaMark/> <w&colon;EnableOpenTypeKerning/> <w&colon;DontFlipMirrorIndents/> <w&colon;OverrideTableStyleHps/> </w&colon;Compatibility> <m&colon;mathPr> <m&colon;mathFont m&colon;val="Cambria Math"/> <m&colon;brkBin m&colon;val="before"/> <m&colon;brkBinSub m&colon;val="--"/> <m&colon;smallFrac m&colon;val="off"/> <m&colon;dispDef/> <m&colon;lMargin m&colon;val="0"/> <m&colon;rMargin m&colon;val="0"/> <m&colon;defJc m&colon;val="centerGroup"/> <m&colon;wrapIndent m&colon;val="1440"/> <m&colon;intLim m&colon;val="subSup"/> <m&colon;naryLim m&colon;val="undOvr"/> </m&colon;mathPr></w&colon;WordDocument></xml><&excl;[endif]--><&excl;--[if gte mso 9]><xml> <w&colon;LatentStyles DefLockedState="false" DefUnhideWhenUsed="true" DefSemiHidden="true" DefQFormat="false" DefPriority="99" LatentStyleCount="267"> <w&colon;LsdException Locked="false" Priority="0" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Normal"/> <w&colon;LsdException Locked="false" Priority="9" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="heading 1"/> <w&colon;LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/> <w&colon;LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/> <w&colon;LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/> <w&colon;LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/> <w&colon;LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/> <w&colon;LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/> <w&colon;LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/> <w&colon;LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/> <w&colon;LsdException Locked="false" Priority="39" Name="toc 1"/> <w&colon;LsdException Locked="false" Priority="39" Name="toc 2"/> <w&colon;LsdException Locked="false" Priority="39" Name="toc 3"/> <w&colon;LsdException Locked="false" Priority="39" Name="toc 4"/> <w&colon;LsdException Locked="false" Priority="39" Name="toc 5"/> <w&colon;LsdException Locked="false" Priority="39" Name="toc 6"/> <w&colon;LsdException Locked="false" Priority="39" Name="toc 7"/> <w&colon;LsdException Locked="false" Priority="39" Name="toc 8"/> <w&colon;LsdException Locked="false" Priority="39" Name="toc 9"/> <w&colon;LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/> <w&colon;LsdException Locked="false" Priority="10" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Title"/> <w&colon;LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/> <w&colon;LsdException Locked="false" Priority="11" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/> <w&colon;LsdException Locked="false" Priority="22" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Strong"/> <w&colon;LsdException Locked="false" Priority="20" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/> <w&colon;LsdException Locked="false" Priority="59" SemiHidden="false" UnhideWhenUsed="false" Name="Table Grid"/> <w&colon;LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/> <w&colon;LsdException Locked="false" Priority="1" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/> <w&colon;LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading"/> <w&colon;LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List"/> <w&colon;LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid"/> <w&colon;LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1"/> <w&colon;LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2"/> <w&colon;LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1"/> <w&colon;LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2"/> <w&colon;LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1"/> <w&colon;LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2"/> <w&colon;LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3"/> <w&colon;LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List"/> <w&colon;LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading"/> <w&colon;LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List"/> <w&colon;LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid"/> <w&colon;LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 1"/> <w&colon;LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 1"/> <w&colon;LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 1"/> <w&colon;LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/> <w&colon;LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/> <w&colon;LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/> <w&colon;LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/> <w&colon;LsdException Locked="false" Priority="34" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/> <w&colon;LsdException Locked="false" Priority="29" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Quote"/> <w&colon;LsdException Locked="false" Priority="30" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/> <w&colon;LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/> <w&colon;LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/> <w&colon;LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/> <w&colon;LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/> <w&colon;LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 1"/> <w&colon;LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/> <w&colon;LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 1"/> <w&colon;LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/> <w&colon;LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 2"/> <w&colon;LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 2"/> <w&colon;LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 2"/> <w&colon;LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/> <w&colon;LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/> <w&colon;LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/> <w&colon;LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/> <w&colon;LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/> <w&colon;LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/> <w&colon;LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/> <w&colon;LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 2"/> <w&colon;LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/> <w&colon;LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 2"/> <w&colon;LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/> <w&colon;LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 3"/> <w&colon;LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 3"/> <w&colon;LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 3"/> <w&colon;LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/> <w&colon;LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/> <w&colon;LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/> <w&colon;LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/> <w&colon;LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/> <w&colon;LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/> <w&colon;LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/> <w&colon;LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 3"/> <w&colon;LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/> <w&colon;LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 3"/> <w&colon;LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/> <w&colon;LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 4"/> <w&colon;LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 4"/> <w&colon;LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 4"/> <w&colon;LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/> <w&colon;LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/> <w&colon;LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/> <w&colon;LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/> <w&colon;LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/> <w&colon;LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/> <w&colon;LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/> <w&colon;LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 4"/> <w&colon;LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/> <w&colon;LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 4"/> <w&colon;LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/> <w&colon;LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 5"/> <w&colon;LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 5"/> <w&colon;LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 5"/> <w&colon;LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/> <w&colon;LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/> <w&colon;LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/> <w&colon;LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/> <w&colon;LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/> <w&colon;LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/> <w&colon;LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/> <w&colon;LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 5"/> <w&colon;LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/> <w&colon;LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 5"/> <w&colon;LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/> <w&colon;LsdException Locked="false" Priority="60" SemiHidden="false" UnhideWhenUsed="false" Name="Light Shading Accent 6"/> <w&colon;LsdException Locked="false" Priority="61" SemiHidden="false" UnhideWhenUsed="false" Name="Light List Accent 6"/> <w&colon;LsdException Locked="false" Priority="62" SemiHidden="false" UnhideWhenUsed="false" Name="Light Grid Accent 6"/> <w&colon;LsdException Locked="false" Priority="63" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/> <w&colon;LsdException Locked="false" Priority="64" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/> <w&colon;LsdException Locked="false" Priority="65" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/> <w&colon;LsdException Locked="false" Priority="66" SemiHidden="false" UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/> <w&colon;LsdException Locked="false" Priority="67" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/> <w&colon;LsdException Locked="false" Priority="68" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/> <w&colon;LsdException Locked="false" Priority="69" SemiHidden="false" UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/> <w&colon;LsdException Locked="false" Priority="70" SemiHidden="false" UnhideWhenUsed="false" Name="Dark List Accent 6"/> <w&colon;LsdException Locked="false" Priority="71" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/> <w&colon;LsdException Locked="false" Priority="72" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful List Accent 6"/> <w&colon;LsdException Locked="false" Priority="73" SemiHidden="false" UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/> <w&colon;LsdException Locked="false" Priority="19" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/> <w&colon;LsdException Locked="false" Priority="21" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/> <w&colon;LsdException Locked="false" Priority="31" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/> <w&colon;LsdException Locked="false" Priority="32" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/> <w&colon;LsdException Locked="false" Priority="33" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Book Title"/> <w&colon;LsdException Locked="false" Priority="37" Name="Bibliography"/> <w&colon;LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/> </w&colon;LatentStyles></xml><&excl;[endif]--><&excl;--[if gte mso 10]><&excl;[endif]--> </p>&NewLine;<div></div>&NewLine;<div>VMware recommends that you replace default certificates with those signed by commercial certificate authority&period; Make sure to deploy new certificate in stages rather than all in one&period; </div>&NewLine;<div>Follow following three steps</div>&NewLine;<p></p>&NewLine;<ul style="text-align&colon; left&semi;">&NewLine;<li><span style="mso-bidi-font-family&colon; Calibri&semi; mso-bidi-theme-font&colon; minor-latin&semi;"><span style="mso-list&colon; Ignore&semi;"><span style="font&colon; 7&period;0pt &quot&semi;Times New Roman&quot&semi;&semi;"></span></span></span>Create certificate-signing request (CSRs)</li>&NewLine;<li><span style="mso-bidi-font-family&colon; Calibri&semi; mso-bidi-theme-font&colon; minor-latin&semi;"><span style="mso-list&colon; Ignore&semi;"></span></span>Create the PFX File</li>&NewLine;<li><span style="mso-bidi-font-family&colon; Calibri&semi; mso-bidi-theme-font&colon; minor-latin&semi;"><span style="mso-list&colon; Ignore&semi;"></span></span>Load replacement certificates into memory</li>&NewLine;</ul>&NewLine;<p></p>&NewLine;<div></div>&NewLine;<div><b style="mso-bidi-font-weight&colon; normal&semi;">Create certificate-signing request (CSRs)</b></div>&NewLine;<div></div>&NewLine;<div style="margin-left&colon; 54&period;0pt&semi; mso-add-space&colon; auto&semi; mso-list&colon; l0 level1 lfo2&semi; text-indent&colon; -18&period;0pt&semi;"><span style="font-family&colon; Symbol&semi; mso-bidi-font-family&colon; Symbol&semi; mso-fareast-font-family&colon; Symbol&semi;"><span style="mso-list&colon; Ignore&semi;">·<span style="font&colon; 7&period;0pt &quot&semi;Times New Roman&quot&semi;&semi;">&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; </span></span></span>You can use open ssl to create SSL&period; Edit openssl&period;cnf according to your environment, default open ssl installation include openssl&period;cnf , default location is c&colon;openssllib&period;</div>&NewLine;<div style="margin-left&colon; 54&period;0pt&semi; mso-add-space&colon; auto&semi; mso-list&colon; l0 level1 lfo2&semi; text-indent&colon; -18&period;0pt&semi;"><span style="font-family&colon; Symbol&semi; mso-bidi-font-family&colon; Symbol&semi; mso-fareast-font-family&colon; Symbol&semi;"><span style="mso-list&colon; Ignore&semi;">·<span style="font&colon; 7&period;0pt &quot&semi;Times New Roman&quot&semi;&semi;">&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; </span></span></span>Create RSA key for the vCenter Server System and CSR</div>&NewLine;<div style="margin-left&colon; 90&period;0pt&semi; mso-add-space&colon; auto&semi; mso-list&colon; l0 level2 lfo2&semi; text-indent&colon; -18&period;0pt&semi;"><span style="color&colon; red&semi; font-family&colon; &quot&semi;Courier New&quot&semi;&semi; mso-fareast-font-family&colon; &quot&semi;Courier New&quot&semi;&semi;"><span style="mso-list&colon; Ignore&semi;">o<span style="font&colon; 7&period;0pt &quot&semi;Times New Roman&quot&semi;&semi;">&nbsp&semi;&nbsp&semi; </span></span></span><span style="color&colon; red&semi;">Openssl req –new –nodes –out mycsr&period;csr –config openssl&period;cnf</span></div>&NewLine;<div style="margin-left&colon; 90&period;0pt&semi; mso-add-space&colon; auto&semi; mso-list&colon; l0 level2 lfo2&semi; text-indent&colon; -18&period;0pt&semi;"><span style="font-family&colon; &quot&semi;Courier New&quot&semi;&semi; mso-fareast-font-family&colon; &quot&semi;Courier New&quot&semi;&semi;"><span style="mso-list&colon; Ignore&semi;">o<span style="font&colon; 7&period;0pt &quot&semi;Times New Roman&quot&semi;&semi;">&nbsp&semi;&nbsp&semi; </span></span></span>When prompt ed, type the fully qualified host name as the system commnaName and organisation, city , country information&period; </div>&NewLine;<div style="margin-left&colon; 54&period;0pt&semi; mso-add-space&colon; auto&semi; mso-list&colon; l0 level1 lfo2&semi; text-indent&colon; -18&period;0pt&semi;"><span style="font-family&colon; Symbol&semi; mso-bidi-font-family&colon; Symbol&semi; mso-fareast-font-family&colon; Symbol&semi;"><span style="mso-list&colon; Ignore&semi;">·<span style="font&colon; 7&period;0pt &quot&semi;Times New Roman&quot&semi;&semi;">&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; </span></span></span>Send the certificate request to commercial authority and wait for signed cert&period;</div>&NewLine;<div style="margin-left&colon; 54&period;0pt&semi; mso-add-space&colon; auto&semi;"></div>&NewLine;<div><b style="mso-bidi-font-weight&colon; normal&semi;">Create the PFX File</b></div>&NewLine;<div><b style="mso-bidi-font-weight&colon; normal&semi;"><span style="mso-tab-count&colon; 1&semi;">&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; </span></b>Personal information Exchange format (PFX) enables transfer of certificates and their private keys from one computer to another or to removable media&period; To export the certificate and the key together&period;<span style="mso-spacerun&colon; yes&semi;">&nbsp&semi; </span>Run following command</div>&NewLine;<div><span style="mso-tab-count&colon; 1&semi;">&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; </span><span style="color&colon; red&semi;">Openssl pkcs12 –export –in rui&period;crt –inkey <span style="mso-spacerun&colon; yes&semi;">&nbsp&semi;</span>rui&period;key <span style="mso-spacerun&colon; yes&semi;">&nbsp&semi;</span>&&num;8211&semi; name rui –passout pass&colon;password –out rui&period;pfx</span></div>&NewLine;<div>Note&colon; password is your actual password</div>&NewLine;<div></div>&NewLine;<div><b style="mso-bidi-font-weight&colon; normal&semi;">Load replacement certificates into memory</b></div>&NewLine;<div><span style="mso-tab-count&colon; 1&semi;"></span>Use browser to connect to the vCenter Server system and view the existing certificate&period;&nbsp&semi;&nbsp&semi;</div>&NewLine;<div>&nbsp&semi;Record the detail&period;<span style="mso-spacerun&colon; yes&semi;">&nbsp&semi; </span>You must have following newly generated files</div>&NewLine;<p></p>&NewLine;<ul style="text-align&colon; left&semi;">&NewLine;<li><span style="font-family&colon; Symbol&semi; mso-bidi-font-family&colon; Symbol&semi; mso-fareast-font-family&colon; Symbol&semi;"><span style="mso-list&colon; Ignore&semi;"><span style="font&colon; 7&period;0pt &quot&semi;Times New Roman&quot&semi;&semi;">&nbsp&semi;</span></span></span>X&period;509 certificate file with RSA public key in PEM format, named rui&period;crt</li>&NewLine;<li><span style="font-family&colon; Symbol&semi; mso-bidi-font-family&colon; Symbol&semi; mso-fareast-font-family&colon; Symbol&semi;"><span style="mso-list&colon; Ignore&semi;"><span style="font&colon; 7&period;0pt &quot&semi;Times New Roman&quot&semi;&semi;"></span></span></span>RSA private key in PEM format, named rui&period;key</li>&NewLine;<li><span style="font-family&colon; Symbol&semi; mso-bidi-font-family&colon; Symbol&semi; mso-fareast-font-family&colon; Symbol&semi;"><span style="mso-list&colon; Ignore&semi;"><span style="font&colon; 7&period;0pt &quot&semi;Times New Roman&quot&semi;&semi;"></span></span></span>PKCS12 bundle of the same certificate and key, named rui&period;pfx</li>&NewLine;</ul>&NewLine;<p>On your vcenter server system, locate the ssl directory, backup existing certificate and replace with new one’s&period;</p>&NewLine;<div style="text-align&colon; left&semi;"></div>&NewLine;<div>&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; Using browser on the vcenter server system, connect to </div>&NewLine;<div>&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; http&colon;//localhost/mob/&quest;moid=vpxd-securitymanager&amp&semi;vmodl=1</div>&NewLine;<div>&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; or (to another system)</div>&NewLine;<div>&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; https&colon;//192&period;168&period;150&period;151/mob/&quest;moid=vpxd-securitymanager&amp&semi;vmodl=1</div>&NewLine;<div>&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi;&nbsp&semi; Note&colon; Replace the ip address with your server ip address&period; Enter the Administrator name and password</div>&NewLine;<p></p>&NewLine;<ul style="text-align&colon; left&semi;">&NewLine;<li>The managed object type&colon;vpxSecurityManager web page appears</li>&NewLine;<li>Under Methods, click reloadsslCertificate and Click Invoke Method</li>&NewLine;<li>Restart VMware vCenter Management WebServices</li>&NewLine;<li>Replace the certificate used by the vCenter server Inventory Service by copying above mentioned three files (rui,key, rui&period;crt, rui&period;pfx) into Inventory Service installation directory</li>&NewLine;<li>&nbsp&semi;Restart Inventory service&period;&nbsp&semi;</li>&NewLine;<li>Reload or reopen the vcenter webpage and verify new certificates are installed successfully&period; </li>&NewLine;</ul>&NewLine;<p></p>&NewLine;<div></div>&NewLine;<div></div>&NewLine;</div>&NewLine;

Leave a Reply