We're attempting to replace the vCenter 4.0 self-signed SSL certificate with an Enterprise CA certificate. Unfortunately, it seems there's an issue with vCenter/Tomcat and PFX files created with OpenSSL v1.0.0 or higher (http://kb.vmware.com/kb/1025966). When we attempt to utilize an earlier version of OpenSSL (v0.9.8h) as recommended, openssl.exe crashes when attempting to generate the PFX. We've attempted this on two different WinXP devices (one physical, one vm).
Except for the Tomcat dependent components mentioned in KB1025966, vCenter works fine. So, the new certificate is working.
I've also tried "increasing the maximum memory pool value" as described in the KB1025966, to no avail.
Any thoughts?
