Generate View 5.1 Certificates

This is the English version of my previous post as it may help many many people 

So what you need is :

1 -A CA Server, in my case I installed the following role on a Windows 2008 R2 AD controler :

• Certification Authority
• Certification Authority Web Enrollment

2 – OpenSSL to create certificates, personal I mounted a Windows 2003 R2 32-bit using Win32 OpenSSL 1.0.1c (some have had problems with Win64 OpenSSL).

Once everything are ready  :

1 – We generate the private key and the .csr file: (a council type the following command : SET OPENSSL_CONF=C:\OpenSSL-Win32\bin\openssl.cfg)

# openssl.exe req -newkey rsa:2048 -keyout .key -nodes -days 3650 -out .csr

Like  :

Note: I don’t set anything for « Challenge password » or for « An optional company name » and be careful to put the fqdn of View Connection Server to the « Common Name »

2 -After editing the file .csr and makes a « copy » of its contents, connect to the server certificate using IE or Firefox (or what ever you want):

Select : « Advanced certificate request »

Select: « Submit a certificate request ….. »

Past the content of the .csr file  and select « Web Server » as template.

Retrieve the signed certificate and name it .crt (Select Base 64 encoded) :

Cop the file to C:\OpenSSL-Win32\bin\

Execute the following command :

# openssl.exe pkcs12 -export -in .crt -inkey .key -name vdm -passout pass:testpassword -out .pfx

Example :

Now copy the generated  .pfx file on the View Connection Server and :

Start mmc:

Add Snap-In « Certification »

Choose « Computer account » then « Local Computer »

Import .pfx certificate :

Type password (testpassword dans notre cas)

And then rename the « Friendly Name » of the previous certificate to what you want (vdmold in my case)

Now restart the « VMwareVDMDS » (Restarting this services will restart all View Services).

Now do the same thing for all View Connection Server, View Security Server, Composer (for this one there is no « Friendly Name »).

Note : I personally recommend to create and import certificates before installing View 5.1 ,like this it will use the signed certificate instead of creating one.