How to configure SSL in vCenter 6.7

First take vCenter VM snapshot for backup purpose.

Take note of host where the vCenter VM resides while starting the activity.

Take Access of vCenter Shell to create a certificate CSR request.

root@prod-vcsa71 [ ~ ]# /usr/lib/vmware-vmca/bin/certificate-manager

Now copy the CSR file content in notepad file and save as .txt or .csr

Once have the CSR, generate a certificate by using this CSR.

Now copy the certificate file to the vcenter along with the RootCA certificate.

Start process for Import the certificate.

root@prod-vcsa71 [ ~ ]# /usr/lib/vmware-vmca/bin/certificate-manager

Provide certificate file location as per below the snip, Once all details provided it will take around 20-30 mins depending on the vCenter performance.

Once all required services started properly it will give the status as mentioned below.

Now try to access the vCenter from WebGUI, It is now secure.

Also try to access the vCenter Appliance Management Interface, It will still show the certificate error, to resolve this, restart the vami https service as mentioned below.

root@prod-vcsa71 [ /opt ]# /sbin/service vami-lighttpd restart

Now again try to access the vCenter Appliance Management Interface, It will also start with SSL certificate.

To check service status: 

root@prodvcenter [ ~ ]# service-control --status --all

To check logs if anything fails.

root@prodvcenter [ ~ ]# tail -f /var/log/vmware/vmcad/certificate-manager.log

If Certificate import files due to content-library service fails to start, increase Start time in below mentioned file from 300 to 600sec.

root@prodvcenter [ ~ ]# vi /etc/vmware/vmware-vmon/svcCfgfiles/vdcs.json

ads.txt

google.com, pub-2772399146906971, DIRECT, f08c47fec0942fa0

How to Install or upgrade the VMWare Tools

1.    Select machine on which wants to install/upgrade the VMWare tools (Navigate to Summary > Install/Upgrade VMWare Tools)

     2. Select the Interactive Upgrade option and click on Upgrade.

    3. After upgrade selection you can see and verify the ISO image is connected as mentioned below.

   4. Now take access of machine and mount the attached ISO.

   # mount /dev/cdrom /mnt/

   5. Temporary copy the VMWareTools upgrade tar to local machine.

   # mkdir /tmp/vmware

   # cp VMwareTools-10.3.5-10430147.tar.gz /tmp/vmware/

   # cd /tmp/vmware/

   # tar xzvf VMwareTools-10.3.5-10430147.tar.gz

   # cd vmware-tools-distrib/

   # ./vmware-install.pl

   Press “Enter” on asked inputs.

   Once installed the tools successfully it will prompt the status of installed tool and its service status.

   6. Check the service status by below command.

   # /etc/vmware-tools/services.sh “status/start/stop”

   7. It will automatically eject the ISO file, if not then un-mount the ISO file manually and    disconnect/verify it from vCenter.

   8. Check and verify the status of VMware Tools from vCenter.

   9. Re-config the VMWare tools after each Kernel upgrades.

   # ./usr/bin/vmware-config-tools.pl

   VMware automatic kernel modules: yes

   10. Upgrade VMware Tools in Windows machines.

    Fist attach the ISO as mentioned in Points 1, 2 & 3.

    Take access of machine and open the CD/DVD, there you can see and run the VMware/setup.exe

    Follow the instructions for successfully installation/up gradation of tools.

    Restart the machine when prompted and disconnect the CD/DVD from vCenter.

    Verify the VMware Tools status from vCenter (As mentioned in point no. 8).

[Solved]: unable to add devices in OpenDCIM

If unable to add device in OpenDCIM, need to find below method to get it resolved.

# mysql -u root -p
# select @@global.sql_mode;
# set sql_mode="";
# SET GLOBAL sql_mode = "";
# service httpd restart

Re-scan Disk after adding disk to virtual machine

Execute below command after add the disk to the machine in vmware.

# ls /sys/class/scsi_host

host 0

# echo "- - -" > /sys/class/scsi_host/host0/scan

# fdisk -l