Installation

2 Right-click the Trusted Root  Authorities >  folder and click All Tasks >
Import.
3 In the Certicate Import wizard, click Next and browse to the location where the root CA certicate is
stored.
4 Select the root CA certicate le and click Open.
5 Click Next, click Next, and click Finish.
6 If your server certicate was signed by an intermediate CA, import all intermediate certicates in the
certicate chain into the Windows local computer certicate store.
a Go to the  (Local Computer) > Intermediate  Authorities > 
folder.
b Repeat steps 3 through 6 for each intermediate certicate that must be imported.
7 Restart the View Connection Server service, Security Server service, View Composer service, or vCenter
Server service to make your changes take eect.
Bind a New SSL Certificate to the Port Used by View Composer
If you congure a new SSL certicate after you install View Composer, you must run the SviConfig
ReplaceCertificate utility to replace the certicate that is bound to the port used by View Composer. This
utility unbinds the existing certicate and binds the new certicate to the port.
If you install the new certicate on the Windows Server computer before you install View Composer, you do
not have to run the SviConfig ReplaceCertificate utility. When you run the View Composer installer, you
can select a certicate signed by a CA instead of the default, self-signed certicate. During the installation,
the selected certicate is bound to the port used by View Composer.
If you intend to replace an existing certicate or the default, self-signed certicate with a new certicate, you
must use the SviConfig ReplaceCertificate utility.
Prerequisites
Verify that the new certicate was imported into the Windows local computer certicate store on the
Windows Server computer on which View Composer is installed.
Procedure
1 Stop the View Composer service.
2 Open a command prompt on the Windows Server host where View Composer is installed.
3 Navigate to the SviConfig executable le.
The le is located with the View Composer application. The default path is C:\Program Files
(x86)\VMware\VMware View Composer\sviconfig.exe.
4 Type the SviConfig ReplaceCertificate command.
For example:
sviconfig -operation=ReplaceCertificate
-delete=false
where -delete is a required parameter that operates on the certicate that is being replaced. You must
specify either -delete=true to delete the old certicate from the Windows local computer certicate
store or -delete=false to keep the old certicate in the Windows certicate store.
The utility displays a numbered list of SSL certicates that are available in the Windows local computer
certicate store.
5 To select a certicate, type the number of a certicate and press Enter.
Chapter 8 Configuring SSL Certificates for View Servers
VMware, Inc. 87