Book Image

VMware vSphere 6.5 Cookbook - Third Edition

By : Abhilash G B, Cedric Rajendran
Book Image

VMware vSphere 6.5 Cookbook - Third Edition

By: Abhilash G B, Cedric Rajendran

Overview of this book

VMware vSphere is a complete and robust virtualization product suite that helps transform data centers into simplified on-premises cloud infrastructures, providing for the automation and orchestration of workload deployment and life cycle management of the infrastructure. This book focuses on the latest release of VMware vSphere and follows a recipe-based approach, giving you hands-on instructions required to deploy and manage a vSphere environment. The book starts with the procedures involved in upgrading your existing vSphere infrastructure to vSphere 6.5, followed by deploying a new vSphere 6.5 environment. Then the book delves further into the procedures involved in managing storage and network access to the ESXi hosts and the virtual machines running on them. Moving on, the book covers high availability and fair distribution/utilization of clustered compute and storage resources. Finally, the book covers patching and upgrading the vSphere infrastructure using VUM, certificate management using VMCA, and finishes with a chapter covering the tools that can be used to monitor the performance of a vSphere infrastructure.
Table of Contents (18 chapters)

Replacing all certificates with custom certificate

As previously discussed, if for specific reasons an external CA needs to be used in the environment, we would need to obtain the appropriate certificate and replace it across the components in the vSphere environment. In the following recipe, we replace the machine SSL certificate with the one obtained from the CA.

Getting ready

A prerequisite for replacing the certificate is to ensure that you have created the CSRs and sent it to the CA to obtain the signed certificates. You would require the following:

  • A valid machine SSL custom certificate (*.crt file)
  • A valid machine SSL custom key (*.key file)
  • A valid signing certificate for the custom machine certificate
...