Skip to main content

Posts

VMware vRA Disable sslv3 and Enable TLS1.2 for better security and compliance

=========================================================================================== Link: https://docs.vmware.com/en/vRealize-Automation/7.3/com.vmware.vra.install.upgrade.doc/GUID-1B4E85C5-B980-416F-96B0-160B4C816671.html#GUID-1B4E85C5-B980-416F-96B0-160B4C816671 =========================================================================================== Update the HAProxy configuration cd /etc/haproxy/conf.d/ cat 20-vcac.cfg backend backend-vrhb     mode http     balance roundrobin     option forwardfor     server server1 127.0.0.1:8090 check ssl verify none /*Yellow Highlighted above lines contains ssl verify none, no change */ backend backend-horizon     mode http     balance leastconn     option http-server-close     option forwardfor     option redispatch     http-response replace-v...

Replacing vSphere 6.0 certificates using VMCA as a Subordinate CA

Replacing vSphere 6.0 certificates using VMCA as a Subordinate CA In vSphere 6.0 the VMCA (VMware Certificate Authority) was introduced. This is basically vSphere’s own CA and it’s purpose is to simplify certificate generation and implementation in vSphere, in conjunction with VECS (VMware Endpoint Certificate Store) While I do agree it does simplify the whole process, it’s not without its limitations and known issues. Hopefully this guide will help you avoid those pitfalls. Firstly let me explain the small lab environment I will use. ·          I have a Root CA on my domain controller ( dc.domain.com ) ·          I have an Intermediate CA ( interca.domain.com ) ·          I have a Platform Services Controller 6.0 U2 Appliance ( psc.domain.com ) ·          I have a vCenter Server 6.0 U2 Appliance ( vc.do...