Mike's Realm

So your trying to import a signed certificate that was created with the certificate signing request (CSR) you get an error in vCenter Orchestrator Configuration about the cert not being the correct format. If your using Microsoft Active Directory Certificate Services here are the exact steps:

1. Export a certificate signing request from the VMware vCenter Orchestrator Configuration: Server Certificate area (goto http://vco-server:8282 then click Server Certificate on the left).  If this option isn’t displayed select the option to install a self signed certificate and then you will get the option to export a certificate signing request.
2. Copy and paste the contents of the CSR file you downloaded from vCO Config area to your Cert Server web interface (http://CERTSERVER/certsrv).
3. Select Web Server from the drop down and submit.
4. Now ensure DER encoded is selected and download the certificate chain.
5. Change the file extension on the file you just downloaded from .p7b to .csr
6. You should now be able to upload it immediately using the “Import certificate signing request signed by CA” option inside the VMware vCenter Orchestrator Configuration: Server Certificate area (again goto http://vco-server:8282 and select Server Certificate on the left)
7. You get a green bubble by Server Certificate and everything is happy.

VMware posts security advisories to notify users of any vulnerabilities or other security issues that effect their products.  You can subscribe to be notified via email whenever they post a new advisory.  Keeping on top of these security advisories so you can evaluate each one and understand any risks is important as a VMware Administrator.

These advisories are posted in a couple of places:

• http://www.vmware.com/security/advisories/
• http://lists.vmware.com/mailman/listinfo/security-announce