VMware Cloud Community
danbo_shen
Contributor
Contributor

SSL certificate for vcenter 5.1

We implement the certificate on vcenter followed by KB http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&docTypeID=DT_KB_1_1&e... , when doing the step 5 - step 9:

5.Copy the new certificate files into the above folder. If you are following this resolution path, the proper certificate is in c:\certs\vCenter.

6.Open rui.crt in a text editor and validate that the first line of the file begins with -----BEGIN CERTIFICATE-----.  If there is any text prior to this, remove it.  The code that validates the certificate may fail in Step 5 if there is additional text.

7.Go to https://localhost/mob/?moid=vpxd-securitymanager&vmodl=1 on the vCenter Server and load the certificates for the configuration by using the Managed Object Browser.

8.Click continue if you are prompted with a certificate warning.

9.Enter a vCenter Server administrator username and password when prompted.

10.Click reloadSslCertificate.

11.Click Invoke Method. If successful, the window shows this message: Method Invocation Result: void

After click invoke mthod, it is not successful, it got below error message:

Method Invocation Result: vpx.fault.SecurityConfigFault

NameTypeValue
dynamicTypestringUnset
dynamicPropertyvmodl.DynamicProperty[]Unset
faultCausevmodl.MethodFaultUnset
faultMessagevmodl.LocalizableMessage[]Unset

anyone had the same issue? we had implemented the certificate on SSO and inventory service sucessfully, SSO and vCenter are on different servers.

Tags (2)
0 Kudos
4 Replies
TomHowarth
Leadership
Leadership

Have a read of the excelent blog post by Michael Webster @nzvcdx001 on Managing Certs and vSphere 5.1

http://longwhiteclouds.com/2012/10/27/updating-ca-ssl-certificates-in-vsphere-5-1/

Tom Howarth VCP / VCAP / vExpert
VMware Communities User Moderator
Blog: http://www.planetvm.net
Contributing author on VMware vSphere and Virtual Infrastructure Security: Securing ESX and the Virtual Environment
Contributing author on VCP VMware Certified Professional on VSphere 4 Study Guide: Exam VCP-410
memaad
Virtuoso
Virtuoso

Hi,

I think you have not replaced the default certificate with your signed certificate from all the required location in vCenter server. Also very important point is while  generating certificate, have your followed instruction from KB article

http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=2037432&sl...

Regards

Mohammed

Mohammed | Mark it as helpful or correct if my suggestion is useful.
0 Kudos
ako77
Contributor
Contributor

Hi,

I have the same problem. Is there a solution for that problem?

Thx

Armin

0 Kudos
ksattler
Enthusiast
Enthusiast

Have you solved it?

0 Kudos