asked on

vCenter 6 Update 1 Certificate Status Error Message

When I am in the Web Client on for vCenter 6 update1 I see a certificate status message listed. When I try to click on the error it just brings me to the listed of global alerts under vCenter. I never installed a third party SSL cert and know vCEnter is using a self signed cert. How can I get more information on this error? I do not want it to be 1am on a weekend to find out vCenter stopping working because a self signed SSL certificate expired. I am also still getting use to 6.0 and have only been using it for a month now..

Thanks in Advance...

Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

An issue which is becoming more apparent with browsers and their security against the "man in the middle attack" with SSL certificates, you will find more and more issues, if you DO NOT use certificates which match your FQDN, and ensure certificates are not self-signed, and use good CA root authorities.

e.g. plugins to vCenter Server/Web Client will not display within the web client if using self-sign.

So We would recommend in planning and design, you order new SSL certificates, and replace all the VMware self-sgned SSL certs with your own or purchased.

compdigit44

ASKER

Thank you very much for your help as always. I have noticed browser are getting stricter and SSL certificates especially self signed. My immediate concern what that vCenter would stop working since this warning just started two days ago and we have been running vCenter 6 without issue for over a month.

I will have to search for the KB to update the SSL certificate on vCenter? Any gotchas in do this? I believe there is no impact on the host correct since I am just updating the SSL certificate for the browser

On a side note, how can I get more details on the certificate message displayed in vcenter.

Thanks Again

ASKER CERTIFIED SOLUTION

Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial