Verifying the Signature Algorithm of a Machine SSL Certificate

Products

• VMware vCenter Server

Issue/Introduction

This KB describes how to verify the signature algorithm used for Machine SSL certificate on vCenter Server.

Environment

vSphere 7.0

vSphere 8.0

Resolution

Verifying via the vSphere Client

1. Log in to the vSphere Client.
2. Select "Administration" from the menu.
3. From the left menu of the "Administration" screen, select "Certificates" -> "Certificate Management."
4. Click "VIEW DETAIL" in the "__MACHINE_CERT" panel.
5. The "Signature Algorithm" field lists the signature algorithm used.

Verifying using the vCert script

1. Download the vCert-###.zip file attached to KB 385107.
2. Make vCert.py executable according to KB 385107.
3. Execute vCert.py using the following command:
   ./vCert.py
4. At the prompt below, type "y" and press Enter.
   Do you acknowledge the risks and wish to continue? [y/n]:
5. At the prompt below, type "2" and press Enter.
   Select an option [1]:
6. At the prompt below, type "1" and press Enter.
   Select an option [Return to main menu]:
7. Check the contents of the "Certificate Information" section.
   The "Signature Algorithm:" field lists the signature algorithm used.
8. At the prompt below, type nothing and press Enter.
   Select an option [Return to main menu]:
9. At the prompt below, type "E" and press Enter.
   Select an option [1]:

Additional Information

vCert - Scripted vCenter expired certificate replacement