Replacing SSL certificates in the vSphere Web Client

Products

• VMware vCenter Server
• VMware vSphere ESXi

Issue/Introduction

By default, the vSphere Web Client uses self-signed certificates. This article provides steps to install new certificates in place of the existing self-signed ones.

To remove expired CA certificates see Removing Expired CA Certificates from the TRUSTED_ROOTS store in the VMware Endpoint Certificate Store (VECS).

Environment

VMware vSphere Web Client 5.0.x
VMware vCenter Server 5.0.x

Resolution

To generate certificates for use with the vSphere Web Client, see the Replacing Default vCenter Server Certificates section in the VMware vSphere Examples and Scenarios Guide.

 

Note: You may use the certificates already generated for your vCenter Server if the vSphere Web Client is installed on the same machine.

To install new certificates:
 

1. Stop the VirtualCenter Server service and the VirtualCenter Webmanagement Services. For more information, see Stopping, starting, or restarting vCenter services (1003895).
2. Install the certificates on the server where the vSphere Web Client server component is installed, at:
   
   C:\Program Files\VMware\Infrastructure\vSphere Web Client\DMServer\config\ssl
    
3. Restart the VirtualCenter Server service and the VirtualCenter Webmanagement Services. For more information, see Stopping, starting, or restarting vCenter services (1003895).
4. Your connections are now authenticated and encrypted using the new SSL certificates.

Additional Information

How to stop, start, or restart vCenter Server services