View certificate information for vCenter Server

Products

• VMware vCenter Server

Issue/Introduction

• How can we pull all of the certificate information and check expiration on multiple vcenters?
• Can only pull information on the Machine_SSL certificate and the Trusted Root certificates with PowerCLI

Environment

7.x
8.x

Resolution

There is a script that will pull all the certificate information from vCenter Server.  That vCert script is documented here vCert - expired certificate replacement script

With the vCert script you can view:

• Machine SSL certificate
• Solution User certificates
• CA certificates in VMware Directory
• CA certificates in VECS
• SMS certificates
• vCenter Extension thumbprints
• View STS signing certificates
• VMCA certificate
• Smart Card CA certificates
• LDAPS Identity Source certificates