2.5

VMware, Inc. 33
Chapter 3 Installing Lab Manager
To generate a custom SSL certificate using OpenSSL
1 DownloadandinstallOpenSSLontheLab ManagerServersystem.
2 CreateafilenamedOpenSSlVMware.cfginaworkingdirectory.
Reviewthissamplefile:
# Conf file that vpx uses to generate SSL certificates.
[ req ]
default_bits = 1024
default_keyfile = rui.key
distinguished_name = req_distinguished_name
#Don't encrypt the key
encrypt_key = no
prompt = no
string_mask = nombstr
[ req_distinguished_name ]
countryName = US
stateOrProvinceName = CA
localityName = CA
0.organizationName = VMware, Inc.
organizationalUnitName = VMware, Inc.
commonName = machine1
emailAddress = [e-mail]
3Storeopenssl.exe, libeay32.dll,andssleay32.dllintheworking
directory.
4Fromtheworkingdirectory,changethecommonNameentryin
OpenSSlVMware.cfgtothemachinehostname.
5Fromthecommandpromptintheworkingdirectory,type:
openssl req -new -x509 -keyout "OpenSslVMware.key" -out
"OpenSslVMware.crt" -days 730 -config "<working
directory>\OpenSslVMware.cfg"
openssl pkcs12 -export -out "OpenSslVMware.pfx" -in "OpenSslVMware.crt"
-inkey "OpenSslVMware.key" -name OpenSslVMware -passout
pass:<password>
Thisprocessgeneratesa.pfxfile.
6RemoveanyoutdatedcertificatefromIISandimportthenew.pfxfileintoIIS.
MicrosoftIISdocumentationoffersinstructionsonremovingandimporting
certificates.