6.4

2 Open command prompt and go to C:\Utils\OpenSSL\bin, and set the default OpenSSL conguration
variable.
set OPENSSL_CONF=C:\Utils\OpenSSL-Win32\bin\openssl.cfg
3 Generate a self-signed certicate with a new private key.
openssl req -x509 -nodes -days 9999 -newkey rsa:2048 -keyout HOSTNAME.key -out HOSTNAME.cer -
subj "/CN=HOSTNAME"
4 Convert the certicate and the private key to a .pfx le.
openssl pkcs12 -export -out HOSTNAME.pfx -inkey HOSTNAME.key -in HOSTNAME.cer -name
"HOSTNAME" -passout pass:
5 Deploy the generated SSL certicate (HOSTNAME.PFX le in the bin folder) to the remote server and
import it there .
Import the SSL Certificate on the Remote Machine
Import the PFX certicate le on the remote server. You can do so by aaching your local disk drive to the
Remote Desktop session and copying the le in Windows Explorer.
Procedure
1 Import the certicate into the Local Machine certicate store by pasting the following script in the
PowerShell console:
Replace path-to-pfx-le with the path to the PFX le; for example, C:\OpenSSL-Win64\bin\.
function Install-Certificate ($certPath, [string]$storeLocation = "LocalMachine", [string]
$storeName = "My")
{
$cert = New-Object
System.Security.Cryptography.X509Certificates.X509Certificate2($certPath,"",
"MachineKeySet,PersistKeySet")
$store = New-Object
System.Security.Cryptography.X509Certificates.X509Store($storeName, $storeLocation)
$store.Open("ReadWrite")
$store.Add($cert)
$store.Close()
"Thumbprint: $($cert.Thumbprint)"
}
Install-Certificate path-to-pfx-file\xenapp-dc.vcops.local.pfx
The output of this script is a certicate thumbprint, which is required when seing up an HTTPS
listener for the WinRM service. If you generated a SSL certicate in the IIS Manager, you can get its
thumbprint using the following PowerShell command:
Get-ChildItem cert:\LocalMachine\My | Where-Object { $_.Subject -eq "CN=HOSTNAME" }
2 Copy the certicate to the remote machine (delivery controller) using Windows Explorer.
VMware vRealize Operations for Published Applications Installation and Administration
32 VMware, Inc.