This post is also available in: Italian

Reading Time: 2 minutes

Starting with vSphere 6.0, the new PSC component include not only the SSO part, but also a certification authority for certification management of all vSphere infrastructure elements (unfortunately is not been used yet by all the other VMware’s products).

This simplified not only the certifications management (with auto-enrollment for expired certificates), but also the trust between the different connections.

But to avoid browser warnings you need to trust on the VMware’s CA and first of it you need to gain it. You can simply download it from the vCenter home page, under Download trusted root CA certificates:

You will download a simple download.zip file that contains both the CA certificate and the revocations list.

Note that on vSphere 6.0 is a little more tricky compared to vSphere 6.5: you have to manually rename the files in order to import them.

In order to import the certificate you can use different approaches for a Windows system:

  • Import manually: for Internet Explorer, Edge, Chrome you can simple double click on the certificate and import into the trusted CA. Firefox has a different certs repository.
  • Import by using GPO: under Computer Configuration\Windows Settings\Security Settings\Public Key Policies\Trusted Publishers you can import existing certificates. Be sure to import it in the Trusted Root Certification Authorities store
  • Add as an intermediate CA in your existing CA authority

For the different type of certificates in Windows, see also Self-Signed, Root CA and Intermediate CA Certificates

Share

Related Posts

  • vSphere 5 download

    Finally the vSphere 5 download is now available on VMware site: http://downloads.vmware.com/d/info/datacenter_cloud_infrastructure/vmware_vsphere/5_0 VMware ESXi 5.0 (Build 469512) VMware vCenter 5.0 (Build 456005) Also the official documents is now available: http://www.vmware.com/support/pubs/vsphere-esxi-vcenter-server-pubs.html

  • VMware vSphere Client for iPad

    Il vSphere Client per iPad è un'applicazione sviluppata da VMware per fornire un minimo di gestione (operativa) ad un ambiente vSphere anche da un tablet iPad. La prima versione ufficiale risale a marzo 2011. La particolarità è che questa applicazione necessita lato server di un…

  • VMware vCenter and PSC topologies

    This is an article realized for StarWind blog and focused on the design and architecture of VMware vCenter and PSC topologies. See the original post. You can “federate” multiple vCenter Server systems using vCenter Linked Mode (introduced in vSphere 4.0) to build a single pane of glass and share…

Virtualization, Cloud and Storage Architect. Tech Field delegate. VMUG IT Co-Founder and board member. VMware VMTN Moderator and vExpert 2010-24. Dell TechCenter Rockstar 2014-15. Microsoft MVP 2014-16. Veeam Vanguard 2015-23. Nutanix NTC 2014-20. Several certifications including: VCDX-DCV, VCP-DCV/DT/Cloud, VCAP-DCA/DCD/CIA/CID/DTA/DTD, MCSA, MCSE, MCITP, CCA, NPP.