5.5

Create a Self-Signed Server Certificate by Using the REST API
You can create a self-signed certificate by running a workflow from the Configuration plug-in or by using
the REST API.
The Configuration plug-in contains a workflow for creating a certificate database and inserting a self-signed
server certificate in it. You can access this workflow by navigating to Configuration > Package Signing
Certificate folder in the Workflows view of the Orchestrator client. In addition, you can also run this
workflow by using the Orchestrator REST API.
For information about creating a certificate database and a self-signed server certificate by using the
Orchestrator configuration interface, see “Create a Self-Signed Server Certificate,” on page 55.
Procedure
1 Make a GET request at the URL of the Workflow service of the Create a certificate database and a self-
signed server certificate workflow.
GET https://{vcoHost}:{port}/vco/api/workflows?conditions=name=Create a certificate database
and a self-signed server certificate
2 Retrieve the definition of the Create a certificate database and a self-signed server certificate workflow
by making a GET request at the URL of the definition.
GET https://{vcoHost}:{port}/vco/api/workflows/4d6b34ee-86f7-4a30-8ca0-c8d56ac0f74b
3 Make a POST request at the URL that holds the execution objects of the Create a certificate database and
a self-signed server certificate workflow.
POST https://{vcoHost}:{port}/vco/api/workflows/4d6b34ee-86f7-4a30-8ca0-
c8d56ac0f74b/executions
4 Provide values for the input parameters of the Create a certificate database and a self-signed server
certificate workflow in an execution-context element in the request body.
Option Description
commonName
The common name of the certificate that consists of at least six characters
organization
The name of the organization
organizationalUnit
The name of the organization unit
country
The country code (two characters)
Managing SSL Certificates by Using the REST API
In addition to managing SSL certificates by using the Orchestrator configuration interface, you can also
manage trusted certificates when you run workflows from the Configuration plug-in or by using the REST
API.
The Configuration plug-in contains workflows for importing and deleting SSL certificates. You can access
these workflows by navigating to Configuration > SSL Trust Manager in the Workflows view of the
Orchestrator client. In addition, you can also run these workflows by using the Orchestrator REST API.
Installing and Configuring VMware vCenter Orchestrator
76 VMware, Inc.