6.3

Table Of Contents
n
In the le, all certicates and the private key must be in PEM format. vRealize Operations Manager
does not support certicates in PFX, PKCS12, PKCS7, or other formats.
n
In the le, all certicates and the private key must be PEM-encoded. vRealize Operations Manager does
not support DER-encoded certicates or private keys.
PEM-encoding is base-64 ASCII and contains legible BEGIN and END markers, while DER is a binary
format. Also, le extension might not match encoding. For example, a generic .cer extension might be
used with PEM or DER. To verify encoding format, examine a certicate le using a text editor.
n
The le extension must be .pem.
n
The private key must be generated by the RSA or DSA algorithm.
n
The private key must not be encrypted by a pass phrase if you use the master node conguration
wizard or the administration interface to upload the certicate.
n
The REST API in this vRealize Operations Manager release supports private keys that are encrypted by
a pass phrase. Contact VMware Technical Support for details.
n
The vRealize Operations Manager Web server on all nodes will have the same certicate le, so it must
be valid for all nodes. One way to make the certicate valid for multiple addresses is with multiple
Subject Alternative Name (SAN) entries.
n
SHA1 certicates creates browser compatibility issues. Therefore, ensure that all certicates that are
created and being uploaded to vRealize Operations Manager are signed using SHA2 or newer.
Sample Contents of Custom vRealize Operations Manager Certificates
For troubleshooting purposes, you can open a custom certicate le in a text editor and inspect its contents.
PEM Format Certificate Files
A typical PEM format certicate le resembles the following sample.
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgIKFYXYUwAAAAAAGTANBgkqhkiG9w0BAQ0FADBhMRMwEQYK
CZImiZPyLGQBGRYDY29tMRUwEwYKCZImiZPyLGQBGRYFdm13Y3MxGDAWBgoJkiaJ
<snip>
vKStQJNr7z2+pTy92M6FgJz3y+daL+9ddbaMNp9fVXjHBoDLGGaLOvyD+KJ8+xba
aGJfGf9ELXM=
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
MIIEowIBAAKCAQEA4l5ffX694riI1RmdRLJwL6sOWa+Wf70HRoLtx21kZzbXbUQN
mQhTRiidJ3Ro2gRbj/btSsI+OMUzotz5VRT/yeyoTC5l2uJEapld45RroUDHQwWJ
<snip>
DAN9hQus3832xMkAuVP/jt76dHDYyviyIYbmxzMalX7LZy1MCQVg4hCH0vLsHtLh
M1rOAsz62Eht/iB61AsVCCiN3gLrX7MKsYdxZcRVruGXSIh33ynA
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
MIIDnTCCAoWgAwIBAgIQY+j29InmdYNCs2cK1H4kPzANBgkqhkiG9w0BAQ0FADBh
MRMwEQYKCZImiZPyLGQBGRYDY29tMRUwEwYKCZImiZPyLGQBGRYFdm13Y3MxGDAW
<snip>
ukzUuqX7wEhc+QgJWgl41mWZBZ09gfsA9XuXBL0k17IpVHpEgwwrjQz8X68m4I99
dD5Pflf/nLRJvR9jwXl62yk=
-----END CERTIFICATE-----
Private Keys
Private keys can appear in dierent formats but are enclosed with clear BEGIN and END markers.
Chapter 1 Preparing for vRealize Operations Manager Installation
VMware, Inc. 17