Home / server / Questions / 673329
Accepted
David Yu
Asked: 2015-03-06 11:14:19 +0800 CST

VMware vCloud Automation Center giving "Unable to create SSL keystore" message

  • 772

I'm replacing the self-signed certs on a vCAC installation with enterprise signed certificates and the identity server is giving the error "Unable to create SSL keystore" in the gui after we paste in the key and certificate chain.

  • vCAC 6.2
  • one identity appliance
  • one auto application appliance
  • one IAAS server (Windows IIS)

I'm following the steps provided in:

After Step 5, #10 I get the keystore error.

vmware-vsphere

1 Answers

  1. Best Answer

    Ok I figured out how to generate a cert that will work with the identity and application appliance. In the generating the certificates blog post, in Step 4: Converting the certificates to PEM format, when you convert the pfx to pem format there are different switches used with openssl. Use -clcerts and -nokeys

    openssl pkcs12 -in c:\identity\identity.pfx -clcerts -nokeys -out c:\identity\identity.pem

openssl pkcs12 -in c:\identity\auto.pfx -clcerts -nokeys -out c:\identity\auto.pem

    Here's the link to the vmware vCAC 6.2 documentation where I found the info.

    • 1