vSphere Storage Appliance

 View Only
  • 1.  SSL Thumbprint (SHA1) in ESX i copy to my SpreadSheet

    Posted Apr 09, 2012 07:32 AM

    How I can copy SSL Thumbprint (SHA1) information from iLo console to my SpreadSheet.

    Too many ESX i hosts exist in my environment wehre I'm working and now I'm asked to make a spreadsheet with SSL thumbprint info of all ESX i host.

    for every host I have to open iLo console and make a note of all those manually like

    03:0D:86:8E:3A:49:FC:33:EF:41:07:CD:5C:C3:28:D7:95:3F:11:D0

    this is really time consuing and i'm sure wehther I'm entering correct values in spreadsheet.

    Is there any way please let me know.  Thanks in Advance.



  • 2.  RE: SSL Thumbprint (SHA1) in ESX i copy to my SpreadSheet

    Posted Apr 09, 2012 03:19 PM

    You can enable the ssh shell, and loop through each host with a script.

    -KjB



  • 3.  RE: SSL Thumbprint (SHA1) in ESX i copy to my SpreadSheet

    Posted Apr 10, 2012 06:03 AM

    Thank you..

    and where I can find the script, I'm really new to scripting.  I'm not sure whether I can do it..

    any other alternate or 3rd party tool ....



  • 4.  RE: SSL Thumbprint (SHA1) in ESX i copy to my SpreadSheet
    Best Answer

    Posted Apr 10, 2012 12:57 PM

    Check out lamw's healthcheck script.  It will report on a myriad of items, including the host ssl thumbprint.

    http://communities.vmware.com/docs/DOC-9842

    -KjB



  • 5.  RE: SSL Thumbprint (SHA1) in ESX i copy to my SpreadSheet

    Broadcom Employee
    Posted Apr 15, 2012 06:52 AM

    Take a look at this article for a few options, including a script to help you collect this from a centralized location - http://www.virtuallyghetto.com/2012/04/extracting-ssl-thumbprint-from-esxi.html



  • 6.  RE: SSL Thumbprint (SHA1) in ESX i copy to my SpreadSheet

    Broadcom Employee
    Posted Apr 09, 2012 04:20 PM

    There's a few ways to get this information depending on your configuration.

    1) As already mentioned, if you have SSH access to your ESXi host, you can login and run the following command:

    openssl x509 -in /etc/vmware/ssl/rui.crt -fingerprint -sha1 -noout

    2) You can also get this "remotely" by connecting to the host (no creds required) to get the cert and to get the thumbprint using openssl, this of course assumes your host is on the network and reachable:

    echo "" | openssl s_client -connect 172.30.0.252:443 > /tmp/cert

    openssl x509 -in /tmp/cert -fingerprint -sha1 -noout

    3) If the hosts are already connected to vCenter, you can easily obtain the thumbprint by just going to vCenter using a script querying the vSphere API