6.5.1

Table Of Contents
2 If you have Custom or Thumbprint certificates, see Host Upgrades and Certificates to determine your
preparatory steps.
3 If you have vSphere HA clusters, SSL certificate checking must be enabled.
If certificate checking is not enabled when you upgrade, vSphere HA fails to configure on the hosts.
a Select the vCenter Server instance in the inventory panel.
b Select the Manage tab and the General subtab.
c Verify that the SSL settings field is set to vCenter Server requires verified host SSL
certificates.
Your ESXi hosts are ready for vCenter Server upgrade.
Preparing vCenter Server Certificates for Migration
You must verify that your source vCenter Server certificates are prepared before you start the migration
process.
The instructions apply to vCenter Server 5.5 source deployments.
In vSphere 6.0 and later certificates are stored in the VMware Endpoint Certificate Store. The migration
process proceeds normally and preserves your certificates. For information about vCenter Server 6.0
certificates location, see http://kb.vmware.com/kb/2111411
Certificate Files Location
The vCenter Server certificate files are located at %ProgramData%\VMware\VMware
VirtualCenter\SSL
Supported Certificate Types
If your environment uses any of the supported certificate types, you can continue with the migration. The
migration process proceeds normally and preserves your certificates.
n
Your rui.crt file contains the entire chain including the leaf certificate. You can create this type of
certificate by deploying and using the VMware SSL Certificate Automation Tool, see
http://kb.vmware.com/kb/2057340.
n
Your rui.crt file contains the leaf certificate and the corresponding cacert.pem is available in
%ProgramData%\VMware\VMware VirtualCenter\SSL to validate the rui.crt.
Unsupported Certificate Types
If your environment uses any of the unsupported certificate types, you must prepare your certificates
before you can proceed with the migration process proceeds.
n
Your rui.crt contains only the leaf certificate, the cacert.pem is missing or invalid, and
cacert.pem is not added to the Windows trust store.
vSphere Upgrade
VMware, Inc. 175