VMware VCM 5.3 - TRANSPORT LAYER SECURITY IMPLEMENTATION Manual page 25

-pe Make the private key exportable.
-r Self sign the certificate.
-sk <collector_key_ Name the key container, for easy reference later. This name does not
name> need to be related to the certificate name.
-sk <enterprise_key_ Names the key container, for easy reference later. This name does
name> not need to be related to the certificate name.
-sky exchange Use the key exchange keypair (rather than the signature keypair).
-sr LocalMachine Specifies the subject's certificate store location. VCM and the
examples in this document use "LocalMachine"
-ss My Specifies the subject's certificate store name that stores the output
certificate. "My" designates the personal certificate store.
-ss Root Specifies the subject's certificate store name that stores the output
certificate. "Root" designates the Trusted Root certificate store.
-sv collector_cert_key_ Store the private key in a file instead of the CSP. The extension is
file usually .svk or .pvk.
TLS Implementation for VCM
TECHNICAL WHITE PAPER / 25