{"id":7945,"date":"2021-11-14T21:47:33","date_gmt":"2021-11-14T20:47:33","guid":{"rendered":"https:\/\/michlstechblog.info\/blog\/?p=7945"},"modified":"2021-11-15T09:02:40","modified_gmt":"2021-11-15T08:02:40","slug":"esxi-install-a-custom-certificate","status":"publish","type":"post","link":"https:\/\/michlstechblog.info\/blog\/esxi-install-a-custom-certificate\/","title":{"rendered":"ESXi: Install a custom certificate"},"content":{"rendered":"<div class=\"twoclick_social_bookmarks_post_7945 social_share_privacy clearfix 1.6.4 locale-en_US sprite-en_US\"><\/div><div class=\"twoclick-js\"><script type=\"text\/javascript\">\/* <![CDATA[ *\/\njQuery(document).ready(function($){if($('.twoclick_social_bookmarks_post_7945')){$('.twoclick_social_bookmarks_post_7945').socialSharePrivacy({\"services\":{\"flattr\":{\"uid\":\"Michl\",\"status\":\"on\",\"the_title\":\"ESXi%3A%20Install%20a%20custom%20certificate\",\"the_excerpt\":\"%0D%0AHi%2C%0D%0A%0D%0Athese%20are%20the%20steps%20to%20install%20own%20certificates%20on%20an%20ESXi%20host.%0D%0A%20%28more%26hellip%3B%29\",\"txt_info\":\"2 clicks for more data protection:\\r\\n\\r\\nOnly when you click here, the button will be come active and you can send your recommendation to Flattr. When activating, data are transmitted to third parties. \",\"perma_option\":\"off\"}},\"txt_help\":\"When you activate these fields by clicking, information to Flattr may be transferred abroad, and probably may also stored there.\",\"settings_perma\":\"Enable permanently and accept data transmission. \",\"info_link\":\"http:\\\/\\\/www.heise.de\\\/ct\\\/artikel\\\/2-Klicks-fuer-mehr-Datenschutz-1333879.html\",\"uri\":\"https:\\\/\\\/michlstechblog.info\\\/blog\\\/esxi-install-a-custom-certificate\\\/\",\"post_id\":7945,\"post_title_referrer_track\":\"ESXi%3A+Install+a+custom+certificate\",\"display_infobox\":\"on\"});}});\n\/* ]]> *\/<\/script><\/div><p><!-- https:\/\/kb.vmware.com\/s\/article\/56441 --><br \/>\nHi,<\/p>\n<p>these are the steps to install own certificates on an ESXi host.<br \/>\n<!--more--><\/p>\n<p>Switch the hosts into maintenance mode and remove it from the cluster.<\/p>\n<p>Append your root and intermediate certificate (merge it before into one file), the fullchain, to castore.pem<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\n~ # cp \/etc\/vmware\/ssl\/castore.pem \/etc\/vmware\/ssl\/castore.pem.`date +\\%Y\\%m\\%d-\\%H\\%M`\r\n~ # cat myFullChain &gt;&gt; \/etc\/vmware\/ssl\/castore.pem \r\n<\/pre>\n<p>Then replace the certificate <strong> \/etc\/vmware\/ssl\/rui.crt<\/strong> and the the associated key <strong>\/etc\/vmware\/ssl\/rui.key<\/strong> with the new ones.<\/p>\n<p>and write the new config to the system disk by running the auto-backup script.<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\n~ # \/sbin\/auto-backup.sh\r\n<\/pre>\n<p>Then reboot the ESXi host an put it back into the cluster.<\/p>\n<p>Michael<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hi, these are the steps to install own certificates on an ESXi host.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[1349,1503,457,119,14],"class_list":["post-7945","post","type-post","status-publish","format-standard","hentry","category-vmware","tag-certificates","tag-custom","tag-esxi","tag-install","tag-vmware-2"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/7945","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/comments?post=7945"}],"version-history":[{"count":3,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/7945\/revisions"}],"predecessor-version":[{"id":7948,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/posts\/7945\/revisions\/7948"}],"wp:attachment":[{"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/media?parent=7945"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/categories?post=7945"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michlstechblog.info\/blog\/wp-json\/wp\/v2\/tags?post=7945"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}