3.0.1

VMware, Inc. 79
Chapter 5 Client Management
Thecertificate.csrfileiscreatedinthesamelocation.Thecontentsofthefile
shouldresembleaslightlylongerversionofthefollowingexample:
-----BEGIN NEW CERTIFICATE REQUEST-----
MIIBuDCCASECAQAweDELMAkGA1UEBhMCR0IxEDAOBgNV
BAgTB1Vua25vd24xEDAOBgNVBAcTB1Vua25vd24xFDAS
BgNVBAoTC1ZNd2FyZSBJbmMuMRMwEQYDVQQLEwp2bXdh
XU8/2jEUL5DocLDLnygsUD2g7cUMYdz/HeECAwEAAaAA
AeHnsPs7a1Q0JH6OZvdU
-----END NEW CERTIFICATE REQUEST-----
To submit the CSR and import the certificate
1SendtheCSRfiletoacertificateauthorityinaccordancewiththeirenrollment
processandrequestacertificateinPKCS7format.Aspartofthisprocess,youmay
needtoprovideproofofidentity
,proofofdomainownership,andsoforth.
Fortestingpurposes,manycertificateauthoritiesalsoprovideafreetemporary
SSLcertificatebasedonanuntrustedroot:
Thawte—https://www.thawte.com/cgi/server/try.exe
VeriSign—http://verisign.com/ssl/buy‐ssl‐certificates/free‐ssl‐certificate‐trial
GlobalSign—http://globalsign.com/free‐ssl‐certificate/free‐ssl.htm
2IfyouhavereceivedeitheratemporaryorfullPKCS#7ce
rtificatefromtheCA,copy
thecontentsofthefileintoatexteditorandsaveitascertificate.p7.Thecontents
ofthefileshouldresembleaslightlylongerversionofthefollowingexample :
-----BEGIN PKCS7-----
MIIF+AYJKoZIhvcNAQcCoIIF6TCCBeUCAQExADALBgkqhkiG9w0BBwGgggXNMIID
LDCCApWgAwIBAgIQTpY7DsV1n1HeMGgMjMR2PzANBgkqhkiG9w0BAQUFADCBhzEL
N
OTEIfthecertificateauthoritydoesnotofferPKCS#7asaformat,usethedefault
settingsprovided—youwillbeabletoexportthecertificatedataintheappropriate
formatatalaterstage.
N
OTEAtemporarycertificateispreferabletothedefaultself‐signedcertificate
suppliedwithViewManagerbecauseitusesthecorrectdomainname.However,
clientsstillissuewarningsthattheserviceisnottrusted.