Generating a cert for vcenter7

Jan 14, 2021 · 1 min read · vcenter vmware ·

Gnerate CSR

https://vcenter7.ellin.net/ui/app/admin/certificates
Sign the CSR

openssl x509 -req -in vcenter7.ellin.net.csr -CA rootCA.pem -CAkey rootCA-key.pem -CAcreateserial -out vcenter.crt -sha256 -extfile v3.ext -days 365

Set the desired number of days.
put the following in v3.ext

1    authorityKeyIdentifier=keyid,issuer
2    basicConstraints=CA:FALSE
3    keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
4    subjectAltName = @alt_names
5
6    [alt_names]
7    DNS.1 = vcenter7.ellin.net
8    DNS.2 = vcenter7
9    DNS.3 = 192.168.1.72