Hi
I have a customer with a production vCenter 2.5u4 and ESX 3.5u4 environment. They want to install SRM, however during installation, I get the following error
Failed to generate cert: Error: Invalid Argument DR_CERT_SERVER cerfificate field is too long > 32
The FQDN for vCenter and ESX Hosts comes to 34 characters
I found VMware KB 1007458 which recommends changing the DNS record for vCenter with 32 characters or less, however I want to find out what the potential implications may be...
Additionally, I found VMware KB 1008390 which discusses requirements for using trusted certificates with SRM, however it only talks about installing them on vCenter.
Lots of questions, I know, but I'm looking for a solution which will have the least impact on the customer
Thanks
I have a customer with a production vCenter 2.5u4 and ESX 3.5u4 environment. They want to install SRM, however during installation, I get the following error
Failed to generate cert: Error: Invalid Argument DR_CERT_SERVER cerfificate field is too long > 32
The FQDN for vCenter and ESX Hosts comes to 34 characters
I found VMware KB 1007458 which recommends changing the DNS record for vCenter with 32 characters or less, however I want to find out what the potential implications may be...
- Do I have to change the computername, or just add a 32 character DNS record pointing to the 'unchanged' vCenter?
- If I have to rename vCenter, what should I look out for, as far as potential issues (e.g. impact on other services; licensing; vCenter database; ESX Host etc)
- If I have to rename vCenter, will i have to rename the ESX Hosts too?
Additionally, I found VMware KB 1008390 which discusses requirements for using trusted certificates with SRM, however it only talks about installing them on vCenter.
- Would we run into the same problem during SRM install, if we kept the long FQDN, and used Windows CA certificates?
- If we use Windows CA certificates, what do we have to generate them for (i.e. vCenter only, or for each ESX Host too)
- Would we have to install certificates on any other hosts (ESX, VCB etc)
Lots of questions, I know, but I'm looking for a solution which will have the least impact on the customer
Thanks
Tags:
srm,
certificate