Configure A View Transfer Server Instance To Use A New Certificate - VMware View Manager 4.5 Installation Manual

Procedure
1 Copy the keystore file that contains your certificate to the SSL gateway configuration directory on the
View Connection Server or security server host.
For example:
2 Add the
keyfile
directory on the View Connection Server or security server host.
If the
locked.properties
a Set the
keyfile
If you exported an existing Microsoft IIS SSL server certificate, set
file.
b Set the
keypass
If you exported an existing Microsoft IIS SSL server certificate, set
used when you exported the certificate.
For example:
keyfile=keys.p12
keypass=MY_PASS
3 Restart the View Connection Server service or Security Server service to make your changes take effect.

Configure a View Transfer Server Instance to Use a New Certificate

To configure a View Transfer Server instance to use a new server SSL certificate, you must copy your certificate
and private key files to the View Transfer Server host.
Prerequisites
Add
n
openssl
Path," on page 76.
Create a self-signed certificate, export an existing Microsoft IIS SSL server certificate, or obtain a signed
n
certificate from a CA.
Procedure
1 Open a command prompt and use
For example:
2 Export the certificate file from your PFX or P12 file.
For example:
3 Remove the pass phrase from the private key.
This step prevents Apache from prompting you for your pass phrase each time it is restarted.
For example:
4 Stop the View Transfer Server service.
5 Copy the certificate and private key files to the directory
View\Server\httpd\conf
6 Rename the certificate file to
7 Rename the private key file to
VMware, Inc.
install_directory \VMware\VMware View\Server\sslgateway\conf\keys.p12
and properties to the
keypass
file does not already exist, you must create it.
property to the name of your keystore file.
property to the password for your keystore file.
to the system Path variable on your host. See
openssl
openssl pkcs12 -in filename.pfx -nocerts -out key.pem
openssl pkcs12 -in filename.pfx -clcerts -nokeys -out server.crt
openssl rsa -in key.pem -out server.key
on the View Transfer Server host.
server.crt
server.key
locked.properties
"Add keytool and openssl to the System
to export the private key file from your PFX or P12 file.
install_directory \VMware\VMware
.
.
Chapter 7 Configuring Certificate Authentication
file in the SSL gateway configuration
to the name of your PFX
keyfile
to the password that you
keypass
81