10 Jun 2010

Replace SSL Certificates: Step 4: Create a new PFX-Formatted Certificate

This article forms part of the Replacing vSphere SSL Certificates series.

Before continuing with the steps ioutlined in this article, be sure to have completed Step 3: Submit the new Certificate Request to a Certificate Authority

The rui.key and rui.crt files will be used by VMware products as replacement SSL Certificate files. However in addition to these two files a PFX-formatted certificate file called “rui.pfx” specific for Windows must be created. The “rui.pfx” file is a concatenation of the system’s certificate and private key, exported in PFX format.


To create this file, open a new command prompt and change directory to C:\OpenSSL-Win32\bin\ and type the following command:

openssl pkcs12 -export -in rui.crt -inkey rui.key -name rui -passout pass:testpassword –out rui.pfx

IMPORTANT: Do not change testpassword to anything else. The export password has to remain as testpassword as the VMware vCenter Server depends on this password to function correctly.


Now that the SSL Certificate files have been created, they need to be installed on the vCenter or Update Manager Server.

Written by  0 comment
Last modified on Tuesday, 09 December 2014 15:04
Rate this item
(0 votes)

Comments (0)

There are no comments posted here yet

Leave your comments

Posting comment as a guest. Sign up or login to your account.
0 Characters
Attachments (0 / 3)
Share Your Location