Link to home
Start Free TrialLog in
Avatar of jjl505
jjl505Flag for United States of America

asked on

Certificate and VMware View 4.6

I am attempting to import a certificate into VMware View on the security server.  I've attempted to use both a .crt and a .p7b

The .crt was exported a a .p7b since Register.com doesn't include it in a Tomcat certificate purchase.  Any assistance would be greatly appreciated.

Commands and error messages:


C:\Program Files\VMware\VMware View\Server\jre\bin>keytool -import -keystore dem
o.p12 -storetype pkcs12 -alias tomcat -storepass xxxxxxx -keyalg "RSA" -trustca
certs -file c:\certs\certificate.crt
Owner: CN=sub.domain.com, OU=PositiveSSL, OU=Hosted by Register.com, OU=Domain
Control Validated
Issuer: CN=Register.com CA SSL Services (DV), O=Register.com, C=US
Serial number: xxxxxxxxxxxxxxxxx
Valid from: Thu May 05 18:00:00 MDT 2011 until: Sat May 05 17:59:59 MDT 2012
Certificate fingerprints:
         MD5:  xxxxxxxxxxx
         SHA1: xxxxxxxxxxx
         Signature algorithm name: SHA1withRSA
         Version: 3

Extensions:

#1: ObjectId: 2.5.29.15 Criticality=true
KeyUsage [
  DigitalSignature
  Key_Encipherment
]

#2: ObjectId: 2.5.29.19 Criticality=true
BasicConstraints:[
  CA:false
  PathLen: undefined
]

#3: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 80 CA 54 40 A1 34 B1 EE   54 7F D9 86 58 0B F6 1B  ..T@.4..T...X...
0010: A9 DF 32 2A                                        ..2*
]
]

#4: ObjectId: 1.3.6.1.5.5.7.1.1 Criticality=false
AuthorityInfoAccess [
  [
   accessMethod: 1.3.6.1.5.5.7.48.2
   accessLocation: URIName: http://crt.register.com/RegistercomSSLServicesCADV.c
rt,
   accessMethod: 1.3.6.1.5.5.7.48.1
   accessLocation: URIName: http://ocsp.register.com]
]

#5: ObjectId: 2.5.29.31 Criticality=false
CRLDistributionPoints [
  [DistributionPoint:
     [URIName: http://crl.register.com/RegistercomSSLServicesCADV.crl]
]]

#6: ObjectId: 2.5.29.32 Criticality=false
CertificatePolicies [
  [CertificatePolicyId: [1.3.6.1.4.1.6449.1.2.2.24]
[PolicyQualifierInfo: [
  qualifierID: 1.3.6.1.5.5.7.2.1
  qualifier: 0000: 16 32 68 74 74 70 3A 2F   2F 63 61 2E 72 65 67 69  .2http://c
a.regi
0010: 73 74 65 72 2E 63 6F 6D   2F 72 65 70 6F 73 69 74  ster.com/reposit
0020: 6F 72 79 2F 52 65 67 69   73 74 65 72 5F 43 50 53  ory/Register_CPS
0030: 2E 70 64 66                                        .pdf

]]  ]
]

#7: ObjectId: 2.5.29.37 Criticality=false
ExtendedKeyUsages [
  serverAuth
  clientAuth
]

#8: ObjectId: 2.5.29.35 Criticality=false
AuthorityKeyIdentifier [
KeyIdentifier [
0000: 96 36 9B F8 D6 E5 B3 68   4A 70 7A 7A 72 8D D3 6E  .6.....hJpzzr..n
0010: 2C 0B B9 31                                        ,..1
]

]

#9: ObjectId: 2.5.29.17 Criticality=false
SubjectAlternativeName [
  DNSName: sub.domain.com
  DNSName: www.sub.domain.com
]

Trust this certificate? [no]:  yes
keytool error: java.security.KeyStoreException: TrustedCertEntry not supported



C:\Program Files\VMware\VMware View\Server\jre\bin>keytool -import -keystore dem
o.p12 -storetype pkcs12 -alias tomcat -storepass xxxxxxx -keyalg "RSA" -trustca
certs -file c:\certs\demo.p7b
keytool error: java.lang.Exception: Input not an X.509 certificate

C:\Program Files\VMware\VMware View\Server\jre\bin>
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

Guidelines for generating and importing an SSL certificate for the View Connection Server

http://kb.vmware.com/kb/1008705 
Avatar of jjl505

ASKER

Thank you for the response.  This is the method that I used to create the request and import the cert.  Errors above are the result.

Have you obtained a Signed Certificate from a CA?
Avatar of jjl505

ASKER

Yes.  As stated above the certificate was provided by Register.com.  Issued as a Tomcat certicate.
is your certificate.crt a valid p7 cert?

you could also try dropping the alias switch
ASKER CERTIFIED SOLUTION
Avatar of jjl505
jjl505
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
try opening certicate store using mmc, and then export certificate with private key.
Have you been able to deploy a Win 7 full clone using the normal clone/customization sequence in vCenter Server?
Avatar of jjl505

ASKER

Thank you
Avatar of jjl505

ASKER

I appreciate all the input