Now that we have our Windows Server 2012 R2Â certificate authority configured in Part 1, and our subordinate setup in Part 2, now we should setup autoenrollment and secure the subordinate's web certificate services with SSL. Autoenrollment is where domain joined Windows computers are automatically issued a computer certificate. Services such...
Now that our root Windows Server 2012 R2 certificate authority is installed and published to Active Directory from Part 1, it is time to bring online our subordinate CA. The subordinate CA will be our online issuing CA, since it will be the CA which issues all certificates, be they for users,...
While I have written a number of articles focused on SSL certificates and templates, I have not done a mini-series on how to actually install a Windows Certificate Authority. For this series I'm using Windows Server 2012 R2, but the steps are pretty much identical for Windows Server 2012. Microsoft...
After a bit of a delay, I'm finally publishing how to update your ESXi SSL certificate. The process is pretty much unchanged from the 4.x era, but what is new is my Toolkit script. It has been updated to include ESXi certificate support. This is accomplished all in PowerShell, and does...
So now that vCenter 5.5 with VUM is installed, we need to configure a trusted vCenter update manager SSL certificate and then do a few VUM configuration tweaks. These tweaks include configuring HP and Dell repos, plus configuring basic VUM compliance scans. Blog Series SQL 2012 AlwaysOn Failover Cluster for...
Fresh off the press is an updated version of my vCenter 5.5 SSL certificate Toolkit script. Last year when I did my popular vCenter 5.1 install series the posts contain a series of scripts and CLI commands to replace the SSL certificates. While that process worked for many people, it still...
So yes, after a couple of weeks of pausing on the vSphere 5.5 series I'm back with installing VUM. The VUM install pretty much follows the process we had for vCenter 5.1. In case you haven't heard, VUM is also growing feathers like the Windows VI client and will soon...
Following last year's pattern of 'lettered' vCenter updates, VMware has released vCenter 5.5a. (Note the 'a'.) This addresses a number of issues, mostly with the SSO service. If you are using vCenter on Windows Server 2012, you will no longer have to download a patched DLL. You can find the...
Now that vCenter is fully installed, now it's time to replace the self-signed certificate for the vCenter service and Orchestrator. Since we've already replaced the other certificates (SSO, Inventory, etc.) this process is a piece of cake. If you haven't been following this series to the letter and have all...
The previous 14 installments have all been leading up to this, installing vCenter. Yes, we are finally here. In this post we install vCenter, the windows vSphere client, fix profile driven storage, and configure vCenter to support a clustered SQL database. This post is not the end of the road,...
We are just one post away from installing the actual vCenter service! Now that the rest of the infrastructure is ready, we need to create a service account, databases and DSNs. After all of these steps are completed we can rejoice and very shortly have a working vCenter server. Remember...
The vCenter inventory service has two primary purposes in life. First, it's a cache of objects which the web client accesses. This cache enables the offloading of retrieving objects from the vCenter core service (vpxd). This can also lessen the load on your back-end database if the vCenter service isn't...