User`s guide

Using Certificates With VCM Remote
The use of certificates with VCMRemote ensures secure communication between VCM and the VCM
Remote client when they are communicating outside your internal network.
The communication between the Collector and the VCM Remote client is secured using Transport Layer
Security (TLS) certificates. You can use the VCM certificate or you can use an existing Enterprise certificate.
n
VCM Certificate: A certificate generated during the installation of VCM. The VCM certificate is located
on the Collector at [install path]\VMware\VCM\CollectorData. You must copy the .pem file to
each target machine.
n
Enterprise Certificate: A certificate already in the certificate store in your environment.
Determine the certificate that you are using to validate communication, either a VCM-generated or a
Enterprise certificate in certificate store. By default, the installation of a Windows VCM Agent in HTTP
mode adds the Collector's Enterprise Certificate to the certificate store of the client system. The VCM
Remote client can also use this certificate.
After you install the VCM Remote client, the first time the remote machine connects the Collector
network, it requests a Collector certificate. If the Collector certificate is trusted by the Enterprise certificate
on the client, the Collector certificate is added to the client's certificate store.
Configure and Install the VCMRemote Client
You configure the VCM Remote client server-side communication settings and then install the client on
target Windows machines. After it is installed, theVCM Remote client manages the communication with
VCMwhen the remote machine is connected to the network.
Procedure
1. "Configure the VCM Remote Settings" on page 168
You create custom filter sets for each communication method and configure the settings to ensure
efficient on-going management of the mobile Windows machines managed using the VCM Remote
client.
2. "Install the VCMRemote Client" on page 171
You install the VCM Remote client on the target Windows machines that are not continuously
connected to the network.
3. "Connect VCM Remote Client Machines to the Network" on page 178
Connect your remote machine to the VCM-managed network to begin managing the machine. The
VCM Remote client notifies VCM that the remote machine is on the network and it is processed based
on VCM Remote settings and requires no user interaction.
When you configure Windows machines with the VCM Remote client, the client handles the
communication when the remote machine connects to the network, but the machines are managed as
Windows machines. See "VCM Remote Collection Results" on page 179.
Configure the VCM Remote Settings
You create custom filter sets for each communication method and configure the settings to ensure efficient
on-going management of the mobile Windows machines managed using the VCM Remote client.
vCenter Configuration Manager Installation and Getting Started Guide
168 VMware, Inc.