5.1

5 Use the contents of the CSR file to submit a certificate request to the CA in accordance with the CA's
enrollment process.
After conducting some checks on your company, the CA signs your request, encrypts it with a private
key, and sends you a validated certificate.
The CA also sends you a root CA certificate and, if applicable, an intermediate CA certificate.
6 Save the certificate text to a new file named cert.cer on the View server on which the certificate request
was generated.
7 Save the root CA and intermediate CA certificates to files named root.cer and intermediate.cer on the
View server on which the certificate request was generated.
What to do next
Import the certificate into the Windows local computer certificate store.
Import a Signed Certificate by Using Certreq
When you have a signed certificate from a CA, you can import the certificate into the Windows local computer
certificate store on the View server host.
If you used the certreq utility to generate a CSR, the certificate private key is local to the server on which you
generated the CSR. To work correctly, the certificate must be combined with the private key. Use the
certreq command shown in this procedure to ensure that the certificate and private key are properly combined
and imported into the Windows certificate store.
If you use another method to obtain a signed certificate from a CA, you can use the Microsoft Management
Console (MMC) Snap-in to import a certificate into the Windows certificate store. This method is described in
"Configuring SSL Certificates for View Servers" in the VMware View Installation document.
Prerequisites
Verify that you received a signed certificate from a CA. See “Generate a CSR and Request a Signed Certificate
from a CA,” on page 10.
Procedure
1 Open a command prompt by right-clicking on Command Prompt in the Start menu and selecting Run as
administrator.
2 Navigate to the directory where you saved the signed certificate file such as cert.cer.
For example: cd c:\certificates
3 Import the signed certificate by running the certreq -accept command.
For example: certreq -accept cert.cer
The certificate is imported into the Windows local computer certificate store.
What to do next
Configure the imported certificate to be used by a View server. See “Set Up an Imported Certificate for a View
Server,” on page 12.
Chapter 1 Obtaining SSL Certificates from a Certificate Authority
VMware, Inc. 11