Import The Certificates On The Collector Machines; Makecert Options - VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION Manual

Import the Certificates on the Collector Machines

Perform the following procedure on the new Collector machine, prior to running VCM Installation Manager.
Important: If you are performing this procedure as part of a certificate replacement process, you must manually install
the Enterprise and Collector Certificates in the Collectors' certificate stores, and the Enterprise Certificate in the
Agents' certificate stores. See
Certificates to Agents on page
1. Import the Enterprise Certificate into the local machine trusted root store.
2. Import the Collector Certificate into the local machine personal store.
3. The Enterprise and Collector Certificates are now available for use in the VCM installation.

MakeCert Options

Refer to the following table for a list of the options used in the previously described MakeCert commands, and their
definitions.
Note The strings: AAAAAA-AAAAAA... and BBBBBBBB-BBBBB... represent GUIDS. VMware uses GUIDS to
help create unique names. GUIDS are a useful convention for programmatically creating uniqueness and are generally
not necessary in a manual process.
Field
-b, -e
-cy authority
-eku 1.3.6.1.5.5.7.3.1
<filename>
Creating and Installing Certificates for Collectors on page 12
15.
Definition
Specify begin and end dates. Choose appropriate dates, or omit
them.
Note You cannot enter a time with the date. The time will be
12:00AM GMT. If you chose today's date, it will probably refer to
early this morning.
Certificates are either "authority" or "end". End certificates are not
allowed to sign other certificates.
The Server Authentication OID, required only for the Collector
Certificate.
Optional export file name. This file will not contain the private key.
The file should have a .cer or .pem extension.
TLS Implementation for VCM
and Delivering Initial
TECHNICAL WHITE PAPER / 23