Hello All,
i managed to replace my virtualcenter 2.01 certificates, so i can use virtualcenter webaccess without getting a warning of untrusted certificates..
+++++++++++++++++
But what about the certificates : rui.key and rui.crt wich are located on the ESX Server Host
(/etc/vmware/ssl/ ) ? Do i have to replace them also ? Do i have to create new certificates for the ESX server host ?
What is the advantage of that ? Is this necessary when you replaced the virtualcenter host certificates ?
+++++++++++++++++
i created a small howto for replacing the VC2 host certificates..
Thanks Rob for your hint about creating the rui.crt certificate..
*********************************************************
Howto - Create new certificates with Openssl and Microsoft Certificate Services Web Enrollment for VirtualCenter 2.01
rui.key
=======
openssl genrsa 1024 > rui.key
rui.csr
=======
openssl req -new -key rui.key > rui.csr -config openssl.cfg
when asked for common name, fill in the hostname or the FQDN of the VirtualCenter server
rui.crt
=======
Goto --> Microsoft Certificate Services Web Enrollment
press --> Request a certificate
then press --> Or, submit an advanced certificate request.
then press --> Submit a certificate request by using a base-64-encoded CMC or PKCS #10 file, or submit a renewal request by using a
base-64-encoded PKCS #7 file.
then paste the contents of rui.csr into the field "Saved Request:"
choose with "Certificate Template:" for "Web Server"
press submit
select "Base 64 encoded"
then download the certificate and rename it to rui.crt
rui.pfx
=======
openssl pkcs12 -export -in rui.crt -inkey rui.key -name rui -out rui.pfx
Enter Export Password: <choose your own password>
Verifying password - Enter Export Password: <retype your password>
Replacing the Certificates on VirtualCenter 2 Host
==================================================
copy the files : rui.key , rui.crt and rui.pfx to C:\Documents and Settings\All Users\Application Data\VMware\VMware VirtualCenter\SSL\
Restart your VirtualCenter server service. This will also restart your Webaccess service..
Message was edited by:
dmaster
