For a project I’m currently working on, we are designing a large vRealize Operations (vROps) cluster with Load Balancing and High Availability requirements. Because I wanted to test all the vROps Load Balancing and HA features myself, I needed to create a proper certificate before putting the vROps appliances behind a Load Balancer. This article describes the steps you will have to take to create a proper certificate.

To create the Certificate Request first download OpenSSL for Windows and install it in the default location : C:\OpenSSL-Win32
After OpenSSL is installed we can create the configuration file : C:\OpenSSL-Win32\Certs\vrops.cfg and add the following information. Change the marked values starting and ending with % to your own specification.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
|
[ req ] default_bits = 2048 default_keyfile = vrops.key distinguished_name = req_distinguished_name encrypt_key = no prompt = no string_mask = nombstr req_extensions = v3_req [ v3_req ] basicConstraints = CA:FALSE keyUsage = digitalSignature, keyEncipherment, dataEncipherment extendedKeyUsage = serverAuth, clientAuth subjectAltName = DNS:%LOADBALANCEFQDN%, IP:%LOADBALANCEIP%, DNS:%LOADBALANCESHORTNAME%, DNS:%FIRSTNODEFQDN%, IP:%FIRSTNODEIP%, DNS:%FIRSTNODESHORTNAME%, DNS:%SECONDNODEFQDN%, IP:%SECONDNODEIP%, DNS:%SECONDNODESHORTNAME% [ req_distinguished_name ] countryName = %countryName% stateOrProvinceName = %stateOrProvinceName% localityName = %localityName% 0.organizationName = %organizationName% organizationalUnitName = %organizationalUnitName% commonName = %LOADBALANCEFQDN% |
Read More