Page 1 of 1

Custom Signed Certificates for VMware vCenter

Posted: Mon Dec 16, 2019 1:05 pm
by crazzyfool
Hi,

The vCenter certificate wizard generated a .csr. I've used our OpenVPN CA to sign the CSR and have been issued with the certificate. However it does not seem to meet VMwares requirements. Their documentation states:
Ensure that Digital Signature, Certificate signing and CRL signing are enabled
It looks like the generated certificate has the "Digital Signature" bit.

[andy@home-pc openvpn-ca]$ cat keys/vmca_issued_csr.csr.crt | grep Digital
Digital Signature

However, how do I ensure "certificate signing" and "CRL" are enabled?

Many thanks!