Additional steps may be required to configure MSCA in SDDC Manager 4.x with Basic Auth

Products

• VMware Cloud Foundation

Issue/Introduction

Symptoms:
Additional steps may be required in a VMware Cloud Foundation 4.x environment for "Basic Auth" to be enabled in a setup where the Certificate Authority Web Server service is located on a different machine to the CA server.

Environment

VMware Cloud Foundation 4.x, 5.x

Resolution

1.  When preparing the certificate service template, follow the steps outlined in the following document to prepare the Certificate Service Template:
 
VCF 4.5

https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-5-2-and-earlier/4-5/administering/certificate-management-admin/configure-vmware-cloud-foundation-to-use-microsoft-ca-signed-certificates-admin/configure-a-microsoft-certificate-authority-admin.html

VCF 5.0

https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-5-2-and-earlier/5-0/map-for-administering-vcf-5-0/certificate-management-admin/configure-vmware-cloud-foundation-to-use-microsoft-ca-signed-certificates-admin/configure-a-microsoft-certificate-authority-admin.html

VCF 5.2

https://techdocs.broadcom.com/us/en/vmware-cis/vcf/vcf-5-2-and-earlier/5-2/map-for-administering-vcf-5-2/certificate-management-admin/configure-vmware-cloud-foundation-to-use-microsoft-ca-signed-certificates-admin/configure-a-microsoft-certificate-authority-admin.html

 

2. In addition to the above, there are additional steps required in the following Microsoft document which may be required in a VCF 3.x environment if the MSCA is a 'CAWE' setup, i.e. the Certificate Authority Web Server service is located on a different machine to the CA server. See the following: https://learn.microsoft.com/en-us/archive/blogs/askds/how-to-configure-the-windows-server-2008-ca-web-enrollment-proxy