Book Image

VMware Cross-Cloud Architecture

By : Ajit Pratap Kundan
Book Image

VMware Cross-Cloud Architecture

By: Ajit Pratap Kundan

Overview of this book

Over the past two decades, VMware vSphere has been known as the most trusted and reliable virtualization platform. VMware Cross-Cloud Architecture shows you how to design and configure Cross Cloud Architecture by using VMware Cloud Foundation and vRealize Suite with various use cases across private, public, and hybrid Cloud. This book takes you through everything from a basic understanding of virtualization to advanced aspects of storage and network virtualization, clustering, automation, and management. This book will be your guide to designing all aspects of Cloud. We start with the challenges faced by a traditional data center, define problem statements for you, and then brief you on respective solutions. Moving on, all kinds of virtualization and Cloud offerings from AWS and IBM Soft Layer are introduced and discussed in detail. Then, you'll learn how to design IT infrastructures for new and existing applications with a combination of Cloud Foundation, vRealize Suite, and vSphere enabled with VSAN and NSX. Furthermore, you'll learn how to design and configure high availability, disaster recovery, and apply an appropriate compliance matrix. Toward the end of the book, you will learn how to calculate the TCO/ROI, along with the VMware products packaging and licensing in detail.
Table of Contents (19 chapters)
Title Page
Packt Upsell
Contributors
Preface
Index

Encryption and security certificates


ESXi and vCenter Server are well supported with standard X.509 version 3 certificates (you can get more details on these certificates at https://tools.ietf.org/html/rfc6187 ) to encrypt session data between components. By default, VMware Certificate Authority (VMCA) provisions vCenter Server components and ESXi hosts with signed certificates.

VMware virtual infrastructure use the following certificates by default:

  • ESXi certificates: Used for SSL communication to and from the ESXi host. VMware CA delivers these certificates by default, and they are stored locally on each ESXi host.
  • Machine SSL certificates: Used for communicating to and from vCenter Servers and Platform Service Controller instances. All communication goes through the reverse proxy, then a single certificate can be used. VMware CA provisions these certificates and they are stored in the VMware Endpoint Certificate Store (VECS).
  • Solution user certificates: Used by all solutions and services...