===================
Originally Posted: April 4, 2013
Introducing the vCenter Certificate Automation Tool 1.0
![](https://2.bp.blogspot.com/-x0lV7G-5u1s/VGTicaMJB6I/AAAAAAAAAEM/Dv7kvtk-omQ/s400/certificateautomationtool.png)
To add a little background information various components within vSphere and the vCenter platform use certificates for identifying themselves as well as for secure communication with external software entities (browsers, API clients). These can broadly be classified into the following categories:
- Secure token Service Certificate – Certificate used by vCenter Single Sign On (SSO) for encryption tokens
- Solution User Certificates – Certificates used by each solution to identify themselves as users to SSO
- SSL Certificates – certificates needed for SSL communication for the UI and API layer
- Host Certificates – These certificates are deployed in each ESXi host and used for secure vCenter to ESXi communication.
Note: The new certificate tool automates the updating of certificates in the management layer only (a, b, c above). This tool does NOT handle replacement of certificates in ESXi hosts.
The vCenter Certificate Automation Tool aims to automate the process of uploading certificates and restarting the following components within the vCenter Platform:
- vCenter Server
- vCenter Single Sign On
- vCenter Inventory Service
- vSphere Web Client
- vCenter Log Browser
- VMware Update Manager (VUM)
- vCenter Orchestrator (VCO)
For more information on how to download, install, and use the tool, refer to KB article: Deploying and Using the SSL Certificate Automation Tool (2041600).
======================
Originally Posted: May 21, 2013
SSL Certificate Automation Tool version 1.0.1
Last month we announced a new SSL Certificate Automation tool to help everyone with the implementation of custom certificates. Yesterday, we released the second version of it (version 1.0.1). This is a minor update which aims to simplify the replacement of certificates further by adding Certificate Signing Request (CSR) functionality to the tool. This functionality allows a user to quickly generate certificate requests (and consequently the private keys) for submission to the Certificate Authority. The CSR functionality was the largest portion of manual steps, and as a result the update reduces the number of steps by over 15.
In addition, there are several minor bug fixes which were fixed which impacted tool functionality.
For further details and to download the latest version of the SSL tool see: Deploying and Using the SSL Certificate Automation Tool (2041600).
We hope these additions provide useful for everyone!
======================
Look forward to more to come!