Comments on: vCert Manager – Changing VMware SSL Certs Made Easy

By: vcdxnz001

vcdxnz001 — Thu, 11 Sep 2014 00:09:38 +0000

In reply to Harry. Hi Harry, it does SSO and inventory service as well. You can find out more at VSSLabs.com, VSS Labs is the developer of the solution.

By: Harry

Harry — Mon, 08 Sep 2014 13:34:04 +0000

In reply to @vcdxnz001. Michael, Do you know where I could obtain license costs for vCert Manager for vSphere 5.1? Are you saying in the above article that it only caters for ESXi Hosts & vCenter i.e. not SSO or Inventory Services?

By: Fajar

Fajar — Mon, 09 Jun 2014 02:58:24 +0000

Hi Michael,
I want to change the bits from 2048 to 4096 but I wonder why I cannot edit the generate-certificate script because it's readonly, eventhough I have used x! to save it.
I found the workarond by copying it first to /tmp, edit, and copy back to /sbin. But I'm just curious why cannot edit in /sbin.

By: @vcdxnz001

@vcdxnz001 — Sat, 14 Sep 2013 11:28:47 +0000

In reply to Andrew. Hi Andrew, Heartbeat itself doesn't use the same certificate as vCenter. So there is a separate process to change out the HeartBeat certificates. I have an article on this site with guidance around that. SSL Certificate Management is quite difficult, thats why I helped VSS Labs with technical advice to create vCert Manager. It's really the only tool that provides complete lifecycle management of SSL Certificates for vSphere environments. The GA 1.0 version allows for management of ESX/ESXi Hosts and vCenter Certificates. It doesn't manage any of the other certificates. I understand that future versions will manage other types of certificates based on customer demand and feedback. They tried to take away the vast majority of the pain which was around vCenter, SSO, and Host Certificates. Check it out and have a look at getting an evaluation version.

By: Andrew

Andrew — Sat, 14 Sep 2013 11:24:08 +0000

In reply to @vcdxnz001. Thanks, I'll take a look for it. I was disappointed to find that after spending a few hours updating the environment with CA SSL certificates, the Heartbeat install on my vCenter Server reverted to a self-signed certificate.

By: @vcdxnz001

@vcdxnz001 — Sat, 14 Sep 2013 11:18:55 +0000

In reply to Andrew. Hi Andrew, General availability of vCert Manager was announced at VMworld. You can find some of the latest info by reviewing my VMworld article -

By: Andrew

Andrew — Sat, 14 Sep 2013 11:11:47 +0000

This would be perfect! We just implemented a new vSphere 5.1 environment with Heartbeat and to properly replace the certificates takes hours. I hope this is available in the next 2 years before these certificates expire.

By: Mike Celone

Mike Celone — Tue, 23 Jul 2013 06:59:22 +0000

I found this post today while doing some research on changing certificates in vSphere 5.1. When will this toll be available? Can we still sign up for the early adopter program?

By: Constey

Constey — Fri, 05 Apr 2013 20:19:25 +0000

Yep, i just wrote about it – and noticed that there was some kind of tool i was still waiting for 🙂

By: @vcdxnz001

@vcdxnz001 — Fri, 05 Apr 2013 20:11:09 +0000

In reply to brianjg. I'd recommend you take a look at the new VMware Tool. It will help with vCenter 5.1 certificates.