This article forms part of the Replacing vSphere SSL Certificates series.
Before continuing with the steps ioutlined in this article, be sure to have completed Step 3: Submit the new Certificate Request to a Certificate Authority
The rui.key and rui.crt files will be used by VMware products as replacement SSL Certificate files. However in addition to these two files a PFX-formatted certificate file called “rui.pfx” specific for Windows must be created. The “rui.pfx” file is a concatenation of the system’s certificate and private key, exported in PFX format.
To create this file, open a new command prompt and change directory to C:\OpenSSL-Win32\bin\ and type the following command:
openssl pkcs12 -export -in rui.crt -inkey rui.key -name rui -passout pass:testpassword –out rui.pfx
IMPORTANT: Do not change testpassword to anything else. The export password has to remain as testpassword as the VMware vCenter Server depends on this password to function correctly.
Now that the SSL Certificate files have been created, they need to be installed on the vCenter or Update Manager Server.