{"id":2934,"date":"2015-06-16T08:00:14","date_gmt":"2015-06-15T22:00:14","guid":{"rendered":"https:\/\/www.penguinpunk.net\/blog\/?p=2934"},"modified":"2015-06-16T07:51:28","modified_gmt":"2015-06-15T21:51:28","slug":"vmware-vsphere-replication-5-8-and-custom-certificates","status":"publish","type":"post","link":"https:\/\/www.penguinpunk.net\/blog\/vmware-vsphere-replication-5-8-and-custom-certificates\/","title":{"rendered":"VMware &#8211; vSphere Replication 5.8 and Custom Certificates"},"content":{"rendered":"<p>I waffled on some time ago about using proper certificates in your vSphere 5.5 environment. You can read about some of how to do that <a href=\"https:\/\/www.penguinpunk.net\/blog\/vmware-vsphere-5-5-u2-workarounds-and-random-things-part-5\/\" target=\"_blank\">here<\/a>. Eric has a nice summary of the steps <a href=\"http:\/\/theithollow.com\/2014\/08\/create-vmware-ssl-certificate-requests\/\" target=\"_blank\">here<\/a>. I got a call recently from the customer about a few things and they mentioned some issues with <a href=\"https:\/\/www.vmware.com\/support\/vsphere-replication\/doc\/vsphere-replication-58-release-notes.html\/?src=vmw_so_vex_dfrit_205\" target=\"_blank\">vSphere Replication 5.8<\/a>. Turns out I&#8217;d forgotten about vSphere Replication when I&#8217;d gone through the certificate replacement process, as it was done as a PoC. The fix is simple: power off the appliance and power it on again. VMware has a KB for most every situation, including this one\u00a0&#8211; <a href=\"http:\/\/kb.vmware.com\/kb\/2063955\/?src=vmw_so_vex_dfrit_205\" target=\"_blank\">VMware vSphere Replication appliance no longer able to communicate with the VMware vCenter Server after changing the vCenter certificates (2063955)<\/a>. It\u00a0also helps\u00a0that I&#8217;m a bit late to this particular party.<\/p>\n<p>The next step\u00a0should be\u00a0to replace\u00a0the certificates on your vSphere Replication infrastructure as well. I was going to put together a post on that too, but it&#8217;s probably simplest if you read the VMware KB &#8211; <a href=\"http:\/\/kb.vmware.com\/kb\/2080395\/?src=vmw_so_vex_dfrit_205\" target=\"_blank\">Configuring CA Signed Certificates for VMware vSphere Replication (2080395)<\/a>. <a href=\"http:\/\/www.kanap.net\/en\/\" target=\"_blank\">Friedrich<\/a> also has a great post on some of the basics &#8211; including the certificate replacement process &#8211; <a href=\"http:\/\/www.kanap.net\/2014\/12\/vsphere-replication-part-3-basic-setup-and-custom-certificate\/\" target=\"_blank\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I waffled on some time ago about using proper certificates in your vSphere 5.5 environment. You can read about some of how to do that here. Eric has a nice summary of the steps here. I got a call recently from the customer about a few things and they mentioned some issues with vSphere Replication [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[127,4],"tags":[766,589,316,798,528,786,765],"class_list":["post-2934","post","type-post","status-publish","format-standard","hentry","category-vcenter","category-vmware","tag-certificates","tag-kb","tag-ssl","tag-vcenter","tag-vexpert","tag-vmware","tag-vsphere-replication"],"_links":{"self":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/2934","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/comments?post=2934"}],"version-history":[{"count":1,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/2934\/revisions"}],"predecessor-version":[{"id":2935,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/posts\/2934\/revisions\/2935"}],"wp:attachment":[{"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/media?parent=2934"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/categories?post=2934"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.penguinpunk.net\/blog\/wp-json\/wp\/v2\/tags?post=2934"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}