5.1

Procedure
1 Create an untrusted certificate for the HTTP service.
This command creates an untrusted certificate in a keystore file named certificates.ks.
keytool -keystore certificates.ks -storetype JCEKS -storepass passwd -genkey -keyalg RSA -
alias http
2 Create an untrusted certificate for the console proxy service.
This command adds an untrusted certificate to the keystore file created in Step 1.
keytool -keystore certificates.ks -storetype JCEKS -storepass passwd -genkey -keyalg RSA -
alias consoleproxy
The certificate is valid for 90 days.
3 To verify that all the certificates are imported, list the contents of the keystore file.
keytool -storetype JCEKS -storepass passwd -keystore certificates.ks -list
4 Repeat Step 1 through Step 3 on each of the remaining vCloud Director servers.
What to do next
If you created the certificates.ks keystore file on a computer other than the server on which you generated
the list of fully qualified domain names and their associated IP addresses, copy the keystore file to that server
now. You will need the keystore path name when you run the configuration script. See “Configure Network
and Database Connections,” on page 25.
NOTE Because the vCloud Director configuration script does not run with a privileged identity, the keystore
file and the directory in which it is stored must be readable by any user.
Installing and Configuring vShield Manager
vCloud Director depends on vShield Manager to provide network services to the cloud. Install and configure
vShield Manager before you begin installing vCloud Director.
You must associate each vCenter Server that you add to vCloud Director with a unique instance of vShield
Manager. For information about the network requirements and supported versions of vShield Manager, see
“vCloud Director Hardware and Software Requirements,” on page 9.
IMPORTANT This procedure applies only to new installations of vCloud Director. If you are upgrading an
existing installation of vCloud Director, you can optionally upgrade its associated vShield Manager
installation. A new release of vShield Manager cannot work with an existing release of vCloud Director. See
“Upgrade vShield Manager,” on page 46.
Procedure
1 Use the vSphere Client to log in to your vCenter Server.
2 Select File > Deploy OVF Template.
3 Browse to the location of the vShield Manager.ovf file and follow the prompts to deploy the OVF file.
4 After the OVF file is deployed, power on the vShield Manager virtual machine and open the console.
5 Log in to the console with the user name admin and password default.
6 At the manager prompt, type enable.
7 At the Password prompt, type default to enable setup mode.
When setup mode is enabled, the prompt string changes to manager#.
vCloud Director Installation and Upgrade Guide
20 VMware, Inc.