Unverifiable vCenter STS certificate while adding NSX-V Manager

Introduction Today we have yet another certificate blogpost. This is the fourth blogpost on this in the last couple of months. I’ve recently created a new environment and added custom CA signed vCenter Server certificates through the vSphere Client (UI). In a recent blogpost I had some issues with this …

Fixing an invalid vCenter STS certificate while using ‘cmsso-util’

During an issue I had with my lab environment while using the ‘cmsso-util’ command to join two of my lab vCenters to the same SSO domain, I also had another issue which I will talk about in this blog post. Once I fixed the previous issue, which was due to …

Where is my private key when using the vSphere UI?

Today a very quick post for anybody that is using the vSphere Client to generate a new .CSR to create a new certificate for the vCenter Server. I usually use the certificate-manager tool on the commandline, but I figured, let’s diversify my daily actions and let us use the vSphere …

Chicken and Egg problem with “cmsso-util domain-repoint” on vCenter

Today I came across a funny little issue on my lab environment. I was trying to use the “cmsso-util” tooling to play around and joining my second lab vCenter to the first vCenter Servers SSO Domain. You can read the following VMware piece of documentation if you want to know …

How to fix an expired VCSA Machine SSL certificate with a bugged vmware-eam service

Recently we’ve had some weird issues on one of our customers vCenter Servers. For starters the vMotion and Storage vMotion features weren’t working anymore because of time-outs. Which is weird and something I’ve never seen before. So we started troubleshooting the VCSA server and noticed that it couldn’t retrieve the …

vCenter Appliance (VCSA) Web Client timeout settings

Recently we had a customer asking us if we could change the timeout on the vSphere Web Client because they had some issues with the default 120 minutes / 2 hours that are configured in the vCenter settings. Changing this is rather simple and can be done in the following …