VMware - Configuring VMware Certificate Authority

In this video we configure the VMware Certificate Authority (VMCA) as a subordinate to our recently created Microsoft Certificate Services (2-tier PKI). We then apply the configuration to our vCenter and ESXi hosts to ensure secure connectivity between client and server.
Video on creating the Microsoft Certificate Services environment can be found here: • Configuring 2 Tier Mic...
www.labbingit.com

[@tonyhall699]

Very good video. I couldn't get the ESXi hosts to update their certificates. I am using vSphere 8, so perhaps the underlying system has changed.

[@labbingit]

Hey - did you receive an error when updating the cert? Or could you renew but weren’t getting the certificate from your new chain?

[@josephsatow482]

great video, but after renewing on the individual hosts it still says NET:err_cert_common_name_invalid. yet vcenter cert is valid and good.

[@josephsatow482]

ok i just realized that i was accessing the page via IP address instead of DNS name. using a DNS name, the cert is good. why won't it work with just the IP?

[@labbingit]

When renewing the hosts - this configuration will only use the DNS name. Typically using DNS name is best practice - but I'm sure there would be away to include the IP address in the certificate ESXi host certificate if you wanted to - just not sure of that process. I guess it would come down to the template that the VMCA uses to issue certs to the hosts.