5.0

If your SSL server certificate is signed by an intermediate CA, you must add the intermediate certificate to the
View Transfer Server certificate directory and configure the Apache configuration file to specify the name of
the intermediate certificate.
Prerequisites
n
Add openssl to the system Path variable on your host. See “Add openssl to the System Path,” on
page 89.
n
If you obtained a server certificate from a CA, or your organization provided a server certificate, verify
that your certificate is in PEM format.
n
If your certificate files and key files are in a PKCS#12 keystore file, see “Prepare an Existing Certificate in
PKCS#12 Format for Use with View Transfer Server,” on page 84.
n
If you use an intermediate CA, obtain an intermediate certificate in PEM format.
Procedure
1 Stop the View Transfer Server service.
2 Copy the server certificate, intermediate certificate (if any), and private key files to the directory
install_directory \VMware\VMware View\Server\httpd\conf on the View Transfer Server host.
3 If you have not already taken this step, remove the pass phrase from the private key.
This step prevents Apache from prompting you for your pass phrase each time it is restarted.
For example: openssl rsa -in server-with-pass.key -passin
password -out server.key
4 Edit the entries for SSLCertificateFile and SSLCertificateKeyFile in the Apache configuration file
mod_vprov.conf to specify the names of the server certificate and private key files.
For example:
SSLCertificateFile server.crt
SSLCertificateKeyFile server.key
5 If you copied an intermediate certificate file to the View Transfer Server host, add an entry for the
SSLCertificateChainFile directive to mod_vprov.conf.
For example:
SSLCertificateChainFile intermediateCA.crt
6 Restart the View Transfer Server service to make your changes take effect.
7 Verify that the certificate is configured correctly by using your Web browser to navigate to the View
Transfer Server host address. For example: https:// transfer_server_host_address .
What to do next
In View Administrator, configure settings to use SSL for local mode provisioning and other local mode
operations. See “Configure SSL for View Transfer Server Communications,” on page 87.
If your SSL certificates are signed by a CA that is not well known, install the root certificate (if not already
present) and intermediate certificate in Active Directory. See “Add SSL Certificates in Active Directory,” on
page 88.
VMware View Installation
86 VMware, Inc.