Export Machine SSL Embedded Private Key From vCenter

This quick post demonstrates how to export the Machine SSL embedded Private key from your vCenter Server Appliance (VCSA). If you replaced the default Machine SSL certificate on your vCenter where the CSR was generated from the vCenter Server, the private key would be embedded in the vCenter Appliance certificate store. If you need to…

Continue Reading

Remove certificates with weak signature algorithms in vCenter Server

During the vCenter Server 8.0 upgrade, I was faced with the following Pre-upgrade check error and wasn’t able to continue the upgrade. As of vCenter Server 8.0, certificates with SHA-1 signature algorithms are no longer supported and must be removed or replaced with a certificate that uses SHA-2 signature algorithm. In this post, I’ll show…

Continue Reading

Replace Default vCenter Certificate with a Free Let’s Encrypt SSL

On September 30, 2021, the DST Root CA X3 used to sign Let’s Encrypt’s R3 Intermediate CA Expired; therefore, some of the previous guides I’ve written and many that you will find online are no longer valid. This guide steps you through the process to install a Free Let’s Encrypt SSL Certificate for vCenter that…

Continue Reading

Install Free SSL Certificate for vSphere 7 Home Lab

Last year I wrote the follow guide Install Free Let’s Encrypt SSL Certificate for your vCenter 6.7 Lab. The certificate was issued by Let’s Encrypt via a project called ZeroSSL. Recently ZeroSSL stopped using Let’s Encrypt, and started issuing the certificates themselves, therefore the process to generate the certificate outlined in that guide is no…

Continue Reading

Fix Error, You cannot visit site right now because the website uses HSTS

I faced this error on Chrome. You cannot visit “site” right now because the website uses HSTS. The HTTP Strict-Transport-Security response header (HSTS) lets a web site tell browsers that it should only be accessed using HTTPS, instead of using HTTP, therefore, preventing access. I received this error because I had accessed this URL previously…

Continue Reading

Install Free Let’s Encrypt SSL Certificate for your vCenter 6.7 Lab

In this post, I’ll show you how to install a valid SSL certificate for your vCenter server for FREE!. For this I’ll use a free, open-source web-based tool by ZeroSSL to generate a Let’s Encrypt SSL certificate quickly and easily. Let’s Encrypt is a free open certificate authority brought to you by the non-profit Internet…

Continue Reading