Hybrid vSphere SSL Certificate Replacement

When it comes to SSL Certificates and vCenter, there are a few options: Use the Self-Signed Certificates that are the default – ignore the untrusted certificate warning and go about your day Use the Self-Signed Certificates that are the default and Download the self-signed vCenter Certificate Chain to add it…

Using OpenSSL to create SSL Certificates for vSphere

OpenSSL can be very useful when it comes to working with SSL Certificates in a vSphere environment. It is widely available in Linux/Unix – and that includes the Photon OS in your vCenter.  Just be careful! You should also review the VMware Documentation for vSphere Certificate Requirements for Different Solution…

vCenter Server Certificate Status Alarm

Earlier this week I began receiving alarms from my vCenter regarding a Certificate Status Alarm.  I had not run into this particular error before and it took me a bit of investigation to get it solved. An unusual certificate description The alert kept repeating on an hourly interval and I…

Setup vCenter as Subordinate CA and Replace Host Certificates

Updated – 3/23/22:   Added some notes to regarding Certificate Chain Ordering after working working with a customer using a certificate exported directly from the Microsoft Certificate Management Console. I was trying to replace the self-signed certificates in my vSphere environment – for both the vCenter Server Appliance and the ESXi…