Today, I want to share an interesting, and admittedly frustrating, experience I recently had with VMware vCenter. It all started with an innocuous attempt to log into the vCenter Server, only to be greeted with a rather alarming error message: HTTP Status 500 – Internal Server Error. This error, which usually indicates that the server…
Read moreTag: Certificate
Opportunity Alert: Free VCP Cloud Training for VMware Certification!
Are you looking to get VMware certified? If so, there’s an opportunity you don’t want to miss. For a limited time only, VMware is offering a free VCP cloud training course – a $2400 value! This is an amazing opportunity to become a VMware VCP-VMC without breaking the bank. However, the certification itself is no…
Read moreLet’s determine expired SSL certificates in vCenter and ESXi 6.x and 7.x
Once you have an issue with signing in to your environment or some services cannot start, the more likely root cause is the SSL cert expiration. vCenter has a number of certificates and in this article, I will show you how to determine which certificate expired. The first certificate to check is Sign-on Token Signing…
Read morePower CLI Error: Invalid server certificate. Use Set-PowerCLIConfiguration to set the value for the InvalidCertificateAction option
It may happen that once you want to connect to your vCenter with PowerCLI, you may receive an error about invalid server certification. It just happened to me connecting to my home lab vCenter server. Thankfully there is an easy way to fix that issue. All you need to do is to run this one-line…
Read moreRefresh a vCenter Server STS Certificate Using the vSphere Client
Today my vCenter Server warned my that my STS Signing Certificates are about to expire. Which is good as if STS certificate expire then access to vCenter will be unavailable. If you got caught on this please read this article to resolve your issue. You can refresh your vCenter Server STS signing certificates using the vSphere Client. The…
Read moreHow to create CSR with multiple SANs
Sometime you would like to include SAN (Subject Alternative Name) to your certificate. SAN is a specific type of SSL that allows you to secure multiple domains/subdomains with just one SSL. However VMware tool /usr/lib/vmware-vmca/bin/certificate-manager have no option to add SANs. The solution for this is to not use certificate manager from VMware to create…
Read moreHow to renew certificates for vCenter (6.x)
If you have not upgraded yet to vSphere 7 and your vCenter certificate is about to expire or already expired, here is an runlist how to renew certificate for vCenter: SSH to vCenter with root user and root password Run tool to prepare CSR file. Tool is located: /usr/lib/vmware-vmca/bin/certificate-manager Chose option 1 and press ENTER Enter…
Read moreData Retriever is not initialized yet. Please wait. – How to replace expired internal certificate in vRealize Operations Manager
You may not know but vROps has an internal certificate that may expire. If you won’t catch it on time, you will be in the trouble. You may have the situation that you won’t be able to log into the Admin UI. The cluster is offline and you won’t be able to bring it online,…
Read moreHow to check if STS certificate is about to expire or expired already
By now you should know what to do if your STS certificate expire, but if you have been caught on this one here are simple steps to recover: STS certificate expiration – “Signing certificate is not valid” error in VCSA 6.5.x,6.7.x or vCenter Server 7.0.x NOTE: In vCenter Server version 6.5U3k, 6.7 U3j, or 7.0 U1, you receive a…
Read morevROps – How to replace certificate
As far as version 8.4 I could not find CSR generator, so to generate CSR one need to use OpenSSL If you don’t have OpenSSL on your machine the easiest way is to SSH to your vROPs node and run commands from there: Generate a key pair by running this command: Use the key to…
Read more