6.3

Create Self-Signed SSL Certificate Using the IIS Manager
If IIS 7 or IIS 8 is installed on the remote server, you can use the IIS Manager to generate self-signed SSL
certificates.
Procedure
1 Open IIS Manager.
2 In the Connections pane, select the top-most machine node.
3 Click Server Certificates in the Details pane.
4 Click Create Self-Signed Certificate in the Actions pane.
5 Enter HOSTNAME as certificate friendly name.
6 Select Personal as the certificate store.
Create Self-Signed SSL Certificate Using Makecert.exe
makecert.exe is a part of Microsoft Windows SDK. If you have Microsoft Visual Studio .NET installed, you
can use both the makecert.exe and pvk2pfx.exe tools.
Procedure
1 Open the Visual Studio command prompt in the as an Administrator).
2 Navigate to the folder where you want to create the certificate files.
3 To create a certificate and a private key file, run the following command:
makecert -r -pe -n "CN=HOSTNAME" -eku 1.3.6.1.5.5.7.3.1 -sky exchange -sv HOSTNAME.pvk
HOSTNAME.cer
4 To convert the files into a .pfx file, run the following command:
pvk2pfx -pvk HOSTNAME.pvk -spc HOSTNAME.cer -pfx HOSTNAME.pfx
5 Deploy the generated SSL certificate to the remote server and import it there.
Create Self-Signed SSL Certificate Using OpenSSL
You can create self-signed certificate using OpenSSL.
Prerequisites
Download package Win32 OpenSSL Light for generating SSL certificate from
http://slproweb.com/products/Win32OpenSSL.html to a folder of your choice. For example,
C:\Utils\OpenSSL.
Procedure
1 To add Server Authentication to EKU, open openssl.cfg and add extendedKeyUsage setting under the
v3_ca section.
[ v3_ca ] extendedKeyUsage = serverAuth
2 Open command prompt, go to C:\Utils\OpenSSL\bin, and set default OpenSSL configuration variable.
set OPENSSL_CONF=C:\Utils\OpenSSL-Win32\bin\openssl.cfg
VMware vRealize Operations for Published Applications Installation and Administration
34 VMware, Inc.