{"id":435,"date":"2009-12-19T00:32:46","date_gmt":"2009-12-19T05:32:46","guid":{"rendered":"http:\/\/www.jasemccarty.com\/blog\/?p=435"},"modified":"2009-12-19T00:32:46","modified_gmt":"2009-12-19T05:32:46","slug":"vsphere-godaddy-wildcard-certificate-replacement","status":"publish","type":"post","link":"https:\/\/www.jasemccarty.com\/blog\/vsphere-godaddy-wildcard-certificate-replacement\/","title":{"rendered":"vSphere GoDaddy Wildcard Certificate replacement"},"content":{"rendered":"

I upgraded my vCenter server from 4.0 Patch 1 to 4.0 Update 1, and had some odd issues with an expired VMware certificate.\u00a0 Rather than reinstalling vCenter 4.0 Update 1 from scratch, I decided to see if I could replace the SSL certificate in the same fashion as I did with vCenter 2.5 and VI3<\/strong><\/a>.<\/p>\n

I used the previous method to create the rui.crt, rui.key, and rui.pfx files.<\/p>\n

I then copied these files to the following location:
\nC:Program FilesVMwareVMware VirtualCenterSSL<\/strong><\/p>\n

I then restarted the VMware VirtualCenter Server and VMware VirtualCenter Management Webservices services.<\/p>\n

At first when I used a web browser to access https:\/\/vcenter.jasemccarty.com\/<\/strong> everything appeared to be working correctly.\u00a0 However, when I accessed https:\/\/vcenter.jasemccarty.com:8443\/<\/strong> I could not access the site at all.\u00a0 Remember, that the VMware VirtualCenter Management Webservices run on port 8443 (by default).\u00a0 How could I correct the issue?<\/p>\n

Closer inspection of server.xml (located in C:Program FilesVMwareInfrastructuretomcatconf<\/strong>) revealed the problem.\u00a0 The server.xml file was referencing an improper keystore file.\u00a0 This is the file that keeps track of certificates that the system knows about.<\/p>\n

I modified the Connector section of server.xml to read as follows:<\/p>\n

<Connector port=”8443″ protocol=”HTTP\/1.1″ SSLEnabled=”true”<\/p>\n

maxThreads=”150″ scheme=”https” secure=”false”<\/p>\n

clientAuth=”false” sslProtocol=”TLS”<\/p>\n

keystoreFile=”C:ProgramDataVMwareVMware VirtualCenterSSLrui.pfx”<\/p>\n

keystorePass=”password” keystoreType=”PKCS12″<\/p>\n

ciphers = “SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA,<\/p>\n

TLS_DHE_DSS_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA, SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA” \/><\/p><\/blockquote>\n

I then restarted the VMware VirtualCenter Management Webservices and everything started properly.<\/p>\n

I also reconfigured my NetApp Virtual Storage Console to use the same wildcard certificate, given that a self generated certificate is used, with the host name of VSC (prompts every time I use it).\u00a0 I’ll go into that in my next blog post.<\/p>\n","protected":false},"excerpt":{"rendered":"

I upgraded my vCenter server from 4.0 Patch 1 to 4.0 Update 1, and had some odd issues with an expired VMware certificate.\u00a0 Rather than … <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-435","post","type-post","status-publish","format-standard","hentry","category-virtualization"],"_links":{"self":[{"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/posts\/435","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/comments?post=435"}],"version-history":[{"count":0,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/posts\/435\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/media?parent=435"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/categories?post=435"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jasemccarty.com\/blog\/wp-json\/wp\/v2\/tags?post=435"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}