VMware View Manager 4.5 Installation Manual page 78

VMware View Installation Guide
Procedure
1 Open a command prompt and use
For example:
2 When
keytool
that client computers use to connect to the host.
Option
View Connection Server instance
Security server
View Transfer Server instance
I If you type your name, the certificate will be invalid.
MPORTANT
3 After
keytool
The backup file is useful in case you ever need to rebuild the configuration for the host.
What to do next
To use the self-signed certificate contained in the keystore file, configure the View Connection Server instance,
security server, or View Transfer Server instance to use the certificate. See
Instance or Security Server to Use a New Certificate,"
Instance to Use a New Certificate,"
To replace the self-signed certificate, obtain a signed certificate from a CA. See
from a CA," on page 78.
Obtain a Signed Certificate from a CA
To obtain a signed certificate from a CA, you must create a CSR. For testing purposes, you can obtain a free
temporary certificate based on an untrusted root from Thawte, VeriSign, or GlobalSign.
This procedure assumes that there is no more than one link in the chain between the server certificate and the
root certificate. If you use a temporary certificate, there might be one or more intermediate certificates and you
will need to follow a different procedure. See the instructions provided by the CA that generated the temporary
certificate for more information.
Prerequisites
Create a keystore file and a self-signed certificate.
Procedure
1 Open a command prompt and use
For example:
keytool -certreq -keyalg "RSA" -file certificate.csr -keystore keys.p12 -storetype pkcs12 -
storepass secret
creates the CSR file in the current directory.
keytool
2 Send the CSR to the CA in accordance with the CA's enrollment process and request a certificate in PKCS#7
format.
Some CAs provide certificates only in PKCS#12 format. If you download this type of certificate, you must
convert it to PKCS#7 format.
78
keytool
keytool -genkey -keyalg "RSA" -keystore keys.p12 -storetype pkcs12 -validity 360
prompts you for your first and last name, type the fully qualified domain name (FQDN)
Action
Type the FQDN of the View Connection Server host if you have one View
Connection Server instance. Type the FQDN of the load balancer host if you
use load balancing.
Type the FQDN of the security server host.
Type the FQDN of the View Transfer Server host.
creates the keystore file, back up the file.
on page 81.
keytool
to generate a keystore file.
"Configure a View Connection Server
on page 80 or "Configure a View Transfer Server
to create a CSR.
"Obtain a Signed Certificate
VMware, Inc.