5.0

3 Copy the keys.xml file to the destination computer on which you want to install the new View Composer
service.
4 On the destination computer, open a command prompt and navigate to the %windir
%\Microsoft.NET\Framework\v2.0
xxxxx directory.
5 Type the aspnet_regiis command to migrate the RSA key pair data.
aspnet_regiis -pi "SviKeyContainer" " path \keys.xml"
where path is the path to the exported file.
The registration tool imports the key pair data into the local key container.
What to do next
Install the new View Composer service on the destination vCenter Server computer. For installation
instructions, see the VMware View Installation document.
Update the Certificates on a View Connection Server Instance or
Security Server
When you receive updated server SSL certificates or intermediate certificates, you import the certificates into
a new keystore file and update the locked.properties file on each View Connection Server or security server
host to use the new keystore file.
Typically, server certificates expire after 12 months. Root and intermediate certificates expire after 5 or 10 years.
When you import certificates into a keystore file, the keytool command creates the keystore if the specified
file does not exist.
The new keystore file must have a different name from the existing keystore file. VMware recommends that
you include the expiry date in the file name. For example: keys_2014123.jks.
You must specify a Java keystore file if you import intermediate certificates. If you do not use intermediate
certificates, you can specify a PKCS#12 or PFX file instead of a Java keystore (jks) file.
For more information about creating a keystore file and importing server and intermediate certificates into it,
see the VMware View Installation document.
Prerequisites
Obtain updated server and intermediate certificates from the CA before the currently valid certificates expire.
Procedure
1 If you use intermediate certificates, import the most recent update to the intermediate certificates into a
new keystore file in the same directory as the existing keystore file.
For example:
keytool -importcert -keystore keys_20141231.jks -storepass secret -trustcacerts -alias
intermediateCA -file intermediateCA.cer
2 Import the most recent update to the server certificate into the new keystore file.
For example:
keytool -importcert -keystore keys_20141231.jks -storepass secret -keyalg "RSA" -trustcacerts
-file certificate.p7
VMware View Administration
298 VMware, Inc.