6.0.3

Add Custom Certificates from the Platform Services Controller
You can add custom Machine SSL certicates and custom solution user certicates to the certicate store
from the Platform Services Controller.
In most cases, replacing the machine SSL certicate for each component is sucient. The solution user
certicate remains behind a proxy.
Prerequisites
Generate certicate signing requests (CSRs) for each certicate that you want to replace. You can generate
the CSRs with the Certicate Manager utility. Place the certicate and private key in a location that the
Platform Services Controller can access.
Procedure
1 From a Web browser, connect to the Platform Services Controller by specifying the following URL:
https://psc_hostname_or_IP/psc
In an embedded deployment, the Platform Services Controller host name or IP address is the same as
the vCenter Server host name or IP address.
2 Specify the user name and password for [e-mail] or another member of the vCenter
Single Sign-On Administrators group.
If you specied a dierent domain during installation, log in as administrator@mydomain.
3 Under Certicates, select  Management and specify the IP address or host name for the
Platform Services Controller and the user name and password of the administrator of the local domain
([e-mail] by default), and click Submit.
4 To replace a machine certicate follow these steps:
a Select the Machine  tab and click the certicate that you want to replace.
b Click Replace, and click Browse to replace the certicate chain, then click Browse to replace the
private key.
5 To replace the solution user certicates, follow these steps:
a Select the Solution User  tab and click the rst of the four certicates for a component,
for example, machine.
b Click Replace, and click Browse to replace the certicate chain, then click Browse to replace the
private key.
c Repeat the process for the other three certicates for the same component.
vSphere Security
82 VMware, Inc.