Comments on: VMware: How-to Secure our vCenter Server 7 (VCSA) with a ZeroSSL Certificate

By: cristian

cristian — Tue, 20 Feb 2024 15:19:25 +0000

Do you have any solutions for 7.0.3? Looks like updatemgr does not start anymore with zerossl.

By: jorgeuk

jorgeuk — Wed, 21 Jun 2023 14:25:27 +0000

In reply to Cristian.

That is very strange, what VCSA version? I would probably start from scratch, meaning putting self signed first again, and doing a cleanup:
https://jorgedelacruz.uk/2021/11/23/vmware-fixing-annoying-error-cannot-connect-to-profile-driven-storage-service-related-to-ssl-certificates/

Let us know

By: Cristian

Cristian — Wed, 21 Jun 2023 08:18:45 +0000

I’m not able to update the certs, stuck at 85%… I found some error in the logs:vpxd-svcs-runtime.log.stderr

org.apache.catalina.LifecycleException: Protocol handler initialization failed
Caused by: java.net.SocketException: Protocol family unavailable

Any idea why I get this?

By: Frank

Frank — Tue, 28 Mar 2023 14:06:03 +0000

Saved my life mate. Was ripping what’s left of my hair out! Cheers.

By: Johan

Johan — Tue, 24 Jan 2023 16:13:23 +0000

Is this working for anyone on 7.0.3 Update 3j? Certificate Manager via CLI says that all certificates are replaced successfully, but Update Manager / Lifecycle Manager refuses to start after the certificate replacement…

By: Gilou

Gilou — Tue, 25 Oct 2022 18:53:13 +0000

It seems ZeroSSL is the best choice at this moment: they offer (like you showed) free 3-monthes SSL certificates and I hope it will be possible to acme.sh for automatization…
thanks for your answer
Regards

By: jorgeuk

jorgeuk — Tue, 25 Oct 2022 12:17:02 +0000

In reply to Gilou. Hello, Which provider exactly, Gilou? Cheers

By: Gilou

Gilou — Tue, 25 Oct 2022 10:06:16 +0000

Hi Folks.
Thanks to JorgeUK for all his tutos about SSL (Let’s Encrypt, ZeroSSL) and VCSA (6,7).
I’m trying to set up a free SSL certificate (nevermind the CA) with an automated renewal process on my 7.0.3 VCSA.
Dear Jorge, do you have a tuto for that ? 😉

By: jorgeuk

jorgeuk — Wed, 16 Feb 2022 10:14:39 +0000

In reply to Simon Wilmann (@mllii). Will give it a try later on, after multiple battles with let's encrypt, then zerossl to the rescue, the last time it expired I came back into self-signed to avoid issues. Will give it a try for sure.

By: Simon Wilmann (@mllii)

Simon Wilmann (@mllii) — Tue, 15 Feb 2022 23:39:21 +0000

wondering if this could be automated with acme.sh? https://github.com/acmesh-official/acme.sh
been trying to get this to work with vcenter 7.0.3 but update manager is not happy.