{"id":3769,"date":"2015-07-15T15:11:43","date_gmt":"2015-07-16T07:11:43","guid":{"rendered":"http:\/\/vspherestorage.com\/?p=3769"},"modified":"2015-07-15T15:11:44","modified_gmt":"2015-07-15T23:11:44","slug":"custom-certificate-on-the-outside-vmware-ca","status":"publish","type":"post","link":"https:\/\/vspherestorage.com\/?p=3769","title":{"rendered":"Custom certificate on the outside, VMware CA&#8230;"},"content":{"rendered":"<p>Custom certificate on the outside, VMware CA (VMCA) on the inside &#8211; Replacing vCenter 6.0\u2019s SSL Certificate<\/p>\n<p><a href='http:\/\/vmw.re\/1I3G6Nv' target='_blank'><img src='https:\/\/d3utlhu53nfcwz.cloudfront.net\/171901\/cdnImage\/article\/44e46e39-deda-4340-ad37-d9a604df943d\/?size=Box320'><\/a><\/p>\n<h4><a href='http:\/\/vmw.re\/1I3G6Nv' style='text-decoration: none;' target='_blank'>Custom certificate on the outside, VMware CA&#8230;<\/a><\/h4>\n<p>A customer recently asked me \u201cHow do I replace the \u201cexternal\u201d SSL certificate of vCenter but still use VMCA in default mode?\u201d Ever curious, I asked \u201cWhy?\u201d. His security team required that any \u201cexternally\u201d facing management web pages needed to have a custom certificate that chained up to the corporate PKI. But behind that, they [\u2026]<\/p>\n<hr \/>\n<p><a href='http:\/\/advocacy.vmware.com' target='_blank'>VMware Advocacy<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Custom certificate on the outside, VMware CA (VMCA) on the inside &#8211; Replacing vCenter 6.0\u2019s SSL Certificate Custom certificate on the outside, VMware CA&#8230; A customer recently asked me \u201cHow do I replace the \u201cexternal\u201d SSL certificate of vCenter but still use VMCA in default mode?\u201d Ever curious, I asked \u201cWhy?\u201d. His security team required [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[1],"tags":[],"class_list":["post-3769","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4m26N-YN","jetpack-related-posts":[{"id":2534,"url":"https:\/\/vspherestorage.com\/?p=2534","url_meta":{"origin":3769,"position":0},"title":"VMware vSphere 5.5 U2 Resetting the SSO Password","author":"Mostafa Khalil","date":"11 years ago","format":false,"excerpt":"#VMware #vSphere 5.5 U2 - Resetting the SSO PasswordVMware vSphere 5.5 U2 Resetting the SSO PasswordIn a previous post I talked about deploying custom SSL certs into a vCenter 5.5 environment. As I was working through the update steps, the Certificate Automation Tool kept bombing out when updating the Inventory\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":11447,"url":"https:\/\/vspherestorage.com\/?p=11447","url_meta":{"origin":3769,"position":1},"title":"How to configure vCenter 6.5 as a Subordinate&#8230;","author":"Mostafa Khalil","date":"11 years ago","format":false,"excerpt":"How to configure vCenter 6.5 as a Subordinate CA - vMBaggumHow to configure vCenter 6.5 as a Subordinate...After getting super annoyed with clicking \"Advanced\" and then \"Proceed to vCenter (unsafe)\" every single time I needed to go to the vSphere Web Client it was time for me to solve this\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2538,"url":"https:\/\/vspherestorage.com\/?p=2538","url_meta":{"origin":3769,"position":2},"title":"VMware vSphere Replication 5.8 and Custom&#8230;","author":"Mostafa Khalil","date":"11 years ago","format":false,"excerpt":"#VMware #vSphere Replication 5.8 and Custom CertificatesVMware vSphere Replication 5.8 and Custom...I waffled on some time ago about using proper certificates in your vSphere 5.5 environment. You can read about some of how to do that here. Eric has a nice summary of the steps here. I got a call\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":15401,"url":"https:\/\/vspherestorage.com\/?p=15401","url_meta":{"origin":3769,"position":3},"title":"Automating certificate-manager CLI operations&#8230;","author":"Mostafa Khalil","date":"11 years ago","format":false,"excerpt":"Automating certificate-manager CLI operations...I recently had a customer inquiry where they were interested in automating the certificate replacement for vCenter Solution Users when using the \/usr\/lib\/vmware-vmca\/bin\/certificate-manager CLI, which is found within the vCenter Server Appliance (VCSA). Note: One important thing to understand [\u2026]VMware Social Media Advocacy","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":538,"url":"https:\/\/vspherestorage.com\/?p=538","url_meta":{"origin":3769,"position":4},"title":"Unable to verify certificate for vCenter on&#8230;","author":"Mostafa Khalil","date":"11 years ago","format":false,"excerpt":"Unable to verify certificate for #vCenter on Horizon View Connection ServerUnable to verify certificate for vCenter on...Recently during an outage of my host during to hardware issue in my home lab where my vCenter 6.0 sit on it, resulted some strange behaviour on my View Connection Server 6.1.VMware Advocacy","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":7663,"url":"https:\/\/vspherestorage.com\/?p=7663","url_meta":{"origin":3769,"position":5},"title":"VMware NSX 6.2: Support for Multiple vCenters","author":"Mostafa Khalil","date":"11 years ago","format":false,"excerpt":"#VMware NSX 6.2: Support for Multiple vCentersVMware NSX 6.2: Support for Multiple vCentersVMware NSX 6.2: Support for Multiple vCenters VMware NSX 6.2: Support for Multiple vCenters VMware NSX 6.2 dropped yesterday with some pretty awesome features. I\u2019ll be going through most features in separate posts and this one is for\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/vspherestorage.com\/index.php?rest_route=\/wp\/v2\/posts\/3769","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vspherestorage.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vspherestorage.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vspherestorage.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vspherestorage.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3769"}],"version-history":[{"count":1,"href":"https:\/\/vspherestorage.com\/index.php?rest_route=\/wp\/v2\/posts\/3769\/revisions"}],"predecessor-version":[{"id":3770,"href":"https:\/\/vspherestorage.com\/index.php?rest_route=\/wp\/v2\/posts\/3769\/revisions\/3770"}],"wp:attachment":[{"href":"https:\/\/vspherestorage.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3769"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vspherestorage.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3769"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vspherestorage.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3769"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}