How to import SSL Certificate in ESXi

[@waltthayer3459]

That works on older TSL and SSL enabled browsers. that don't work on anything past 2018 updated browsers

[@michaeladdison4933]

Do we need to put it into maintenance mode or reboot after the pem format import?

[@Goodguyyyyy7]

Hi sir , i am in a test environment using VMware workstation pro 16 with esxi 7.0.3 installed. However i am stuck as i do not have any microsoft AD certificate service. Would appreciate you advice thank u!

[@Futemire]

You may have to create a small VM and use an evaluation copy of Windows Server 2016 Server. Once you setup the vm install the "Active Directory Certificate Services" role. ;)

[@waltthayer3459]

@@Futemire you can't do that until you get past the SSL certificate and TSL certificates

[@Futemire]

@@waltthayer3459 Thanks for the clarification.

[@bryonmiller4326]

I was following along great until 4:58 I have no idea what a Certificate authority server is, I can see you are accessing it on your internal network, I'll keep looking for more tutorials. It shouldn't be this hard to enable an SSL on this, I have to search through tons of tutorials that usually don't work. It took so long to get ssl working on one of the VMs I have setup I can't even remember what I did because I followed so many tutorials.

[@michaeladdison4933]

When you access a webpage, your computer is sending data over the net. The fix for that is encrypting that data. To encrypt it, the computer goes and grabs the ssl cert info. That info includes who "approves" of the cert, and the public key(think of a padlock). Then your computer "encrypts(or locks)" the data it sends across the net(or internal network). When it arrives to the server, it decrypts with the private key(key to the padlock). With that being said, ssl by itself does not mean its secure. You could be encrypting traffic to some guy in france. That ssl cert has to be "approved" by someone that is trusted. Computers automatically trust certificates that are approved by global CA's. That costs money to approve your cert by a global CA. So what most companies do is spin up a Certificate Authority using a windows server or linux server OS. That configuration took a lot of learning for me. But once its set up, you can push out a root cert to all your internal computers to tell it to trust anything with its stamp of approval. Then you can approve a cert for your esxi box, or computers for rdp and so on. I know its been 2 months, but I thought I would give you what I learned. Also think of ssl as more of a padlock and key that is approved by an authority(CA). Enabling ssl is more like generating a padlock key combo(the ssl certificate), and then approving it by submitting a request to the CA. I hope that helps. Setting up the CA is a long convoluted process.

[@Futemire]

The certificate authority server is a server role you can install on a windows server, I installed the role on my file server running Windows 2016 Server. To get more info on this look up more videos about installing the Active Directory Certificate Services role. ;)

[@javiercastillasaavedra]

Hello, thanks for this interesting video, I would like to do what is indicated to get certificates in Exi for local addresses but we do not have a Microsoft server, we only have Linux servers and a Synology NAS, could you help me to do the same with a Linux service or with the Synology NAS?

[@aminefennane1046]

can you make for vcenter? in my case i have private vcenter in my entreprise and i can't fix the certificate any help ?

[@countermeasuresecurityengi9719]

FAIL

[@rinku-blogadmin]

OpenSSL> pkcs7 -in G:\Edge download\certnew.p7b -print_certs -out G:\Edge download\esxicert.pem unknown option download\certnew.p7b pkcs7 [options] outfile where options are -inform arg input format - DER or PEM -outform arg output format - DER or PEM -in arg input file -out arg output file -print_certs print any certs or crl in the input -text print full details of certificates -noout don't output encoded data -engine e use engine e, possibly a hardware device. error in pkcs7

[@rinku-blogadmin]

Sir getting this error where i am doing the mistake i have not created any custom template , I am using default template