ssl setup for vsphere vcenter

vcenter setup

administration / certificates / certificate management

troubleshooting

[CERTIFICATE] Replace cert Failed: Exception found (Only RSA certificates are supported for the Machine SSL certificate)

==> RSA only

Error occurred while adding trusted root certificates: Error encountered while processing request

==> basic constrains or keyusage missing? (from reddit)

resources

official

https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/vcenter-server-upgrade-8-0/upgrading-and-updating-the-vcenter-server-appliance/preparing-to-upgrade-vcenter-server-appliance.html ==> Host Provisioned with Custom Certificates

https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/vsphere-security-8-0/securing-esxi-hosts/certificate-management-for-esxi-hosts/certificate-mode-switches.html ==> vmca vs custom

4 modes

https://4sysops.com/archives/vsphere-7-and-the-enterprise-pki-role-for-ssl-certificates-and-certificate-management/

guides

https://blog.matrixpost.net/how-to-renew-regenerate-the-vcenter-server-certificate/ ==> vmca vs internal CA with vcenter CLI

https://mosnotes.com/2024/02/24/managing-vmware-ssl-certificates/

cli

FW https://knowledge.broadcom.com/external/article/318946/using-vsphere-certificate-manager-to-rep.html

troubles - error uploading cert

https://knowledge.broadcom.com/external/article/373976/unable-to-upload-new-root-certificate-to.html

https://www.reddit.com/r/vmware/comments/ut3p6v/error_while_adding_trusted_root_certificate/

vcenter mgmt

https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/8-0/configuring-vcenter-server-8-0/configuring-vcenter-server-using-the-management-interface/log-in-to-the-vcenter-server-management-interface.html

https://virtualizationreview.com/articles/2018/09/10/how-to-use-vami.aspx

https://www.vladan.fr/how-to-login-into-vmware-vcenter-server-appliance-management-page/

vmca-powered intermediate CA

https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/7-0/vsphere-authentication-7-0/vsphere-security-certificates-authentication/certificate-management-overview-authentication/certificate-replacement-options-authentication.html

https://support.tools/post/vsphere-7-certificates-with-vmca-as-subordinate/

https://knowledge.broadcom.com/external/article/316601/replace-vcenter-machine-ssl-certificate.html

https://knowledge.broadcom.com/external/article/341649/configuring-ca-signed-certificates-for-e.html ==> see Installing and configuring the certificate on the ESXi host

https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/7-0/use-custom-certificates-with-vsphere.html#GUID-DC693417-78CF-477F-9A4F-AFC9AA1D74E7-en

https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/7-0/replacing-all-certificates-with-custom-certificate-certificate-manager.html#GUID-0CBFCF72-C6AD-4CF0-BF44-F4414BBDD91C-en

https://knowledge.broadcom.com/external/article/318946/using-vsphere-certificate-manager-to-rep.html

https://www.vmwarearena.com/master-guide-vcenter-server-certificate-replacement/

https://angrysysops.com/2021/04/20/vsphere-7-certificate-management/

https://www.thegeekstuff.com/2014/10/install-ssl-cert-esxi-vcenter/ ==> vcenter section (deprecated - that’s not appliance)

FW https://jorgedelacruz.uk/2021/01/20/vmware-how-to-secure-our-vcenter-server-7-vcsa-with-a-lets-encrypt-ssl-certificate/