User`s guide

Table Of Contents
Prerequistes
Ensure that you have access to the VMware_VCM_Enterprise_Certificate_*.pem file in the
\Program Files (x86)\VMware\VCM\CollectorData folder on the VCM Collector.
Procedure
1. Copy the VCM certificate, VMware_VCM_Enterprise_Certificate_*.pem, to the OS Provisioning
Server/opt/FastScale/var/fsadmin/basic/ directory.
What to do next
Configure the secure Stunnel communications between the OS Provisioning Server and the VCM
Collector. See "Configure OS Provisioning Server Integration with the VCM Collector" on page 28.
Configure OS Provisioning Server Integration with the VCM Collector
The integration between VCM and the OS Provisioning Server uses Stunnel to establish secure
communication between and the SOAP services of the two components.
Prerequisites
n
Ensure that all private keys are RSA keys.
n
Ensure that certificates are created or obtained, and copied to the required locations using industry best
practices.
n
On the Collector, copy the certificate to c:\Program Files (x86)
\VMware\VCM\Tools\sTunnel\certs\vcm_stunnel_cert.pem.
n
On the Collector, copy the private key to c:\Program Files
(x86)\VMware\VCM\Tools\sTunnel\key\vcm_stunnel_pk.pem.
n
On the OS Provisioning Server, copy the certificate to /opt/FastScale/var/certs/vcm_stunnel_
cert.pem.
n
Verify that all directories where these keys and certificates are stored are secured.
Procedure
1. "Configure Stunnel on the OS Provisioning Server" on page 29.
Stunnel is used to establish secure communication between VCM and the OS Provisioning Server
SOAP services. On the OS Provisioning Server, copy the certificates to the locations specified in the
stunnel.conf file and configure Stunnel to ensure that the connection on the OS Provisioning Server
is operational.
2. "Configure Stunnel on the VCM Collector" on page 30.
The VCM Collector installation process installs Stunnel files that are used to establish secure
communication between VCM and the OS Provisioning Server SOAP services. Configure Stunnel to
ensure that the connection on the Collector is operational.
3. "Confirm Stunnel Configuration" on page 32.
Confirm that Stunnel communication between the OS Provisioning Server and the VCM Collector is
configured and active before you provision target machines.
vCenter Configuration Manager Installation and Getting Started Guide
28 VMware, Inc.