Security

vCenter Certificate Automation Tool 1.0

So for those of us who have experienced the wonderful times of dealing with replacing or updating certificates within our VMware infrastructures, VMware came to the rescue (kind of) and provided a tool for us to use.  This tool has been dubbed vCenter Certificate Automation Tool.  A little excerpt from the release announcement:

Fresh out of development today VMware has a new tool to help everyone with the implementation of custom certificates. The vCenter Certificate Automation Tool 1.0, will help customers update certificates needed for running vCenter Server and supporting components. 

In order to use the tool, you must have the following:

    Administrative privileges on the server(s) you are running the tool on. Although non-administrator users can download and launch the tool, all operations will fail without the proper permissions.

    • Access to each server that has vSphere components for which the SSL certificate will be updated.
    • All vCenter Server components which will have their certificates updated have already been installed and are running.
    • The new certificates already exist and you know the location of the new certificates. For increased security, generate each certificate and private key on the machine where it will be used. The new SSL certificate for each vSphere component must have a unique base DN.

So you don’t have to go around looking, here is a couple of links to KB articles on how to use the vCenter Certificate Automation Tool:


Just wanted to share this with the readers…enjoy!

ESXi 4.1 Lockdown Modes

I came across a great video by David Davis at VMwareVideos.com about ESXi 4.1 Lockdown Mode and the new Total Lockdown Mode.  ESXi lockdown mode is designed to put a layer of security at the local host level and require that the host be managed only through vCenter.  David points out that you can go even further in locking down the local host access with the Total Lockdown Mode which completely disables the DCUI.  I am not 100% sure that this is best suited for me but I guess I could see some possible applications of this mode.

Check out the video here.

Sourced from:  VMwareVideos.com
 Scroll to top