Using CLI to Check the Path of ESXi Certificates

Products

• VMware vSphere ESXi

Issue/Introduction

This article provides steps to verify the location and existence of SSL certificate and private key files on an ESXi host using the command-line interface (CLI).

Environment

VMware ESXi 8.x

Resolution

ESXi uses SSL certificates to secure communication between clients and the host. The default active SSL certificate and private key used by ESXi are stored in the /etc/vmware/ssl/ directory.

Certificate: /etc/vmware/ssl/rui.crt
Private Key: /etc/vmware/ssl/rui.key

Here's how you can check and verify this using the ESXi CLI (SSH into the host):

1. SSH into the ESXi Host using putty

Note: You'll need SSH access enabled on the ESXi host.

2. List the Contents of the /etc/vmware/ssl/ Directory:

ls -l /etc/vmware/ssl/

View Certificate Details

To display details of the current certificate: openssl x509 -in /etc/vmware/ssl/rui.crt -text -noout

Additional Information

Managing Certificates for ESXi Hosts

If you have any additional questions, please raise a support ticket with Broadcom support selecting NSX as the product. 

Handling Log Bundles for offline review with Broadcom support.

• Uploading files to cases on the Broadcom Support Portal
• Creating and managing Broadcom support cases