{"id":409,"date":"2019-04-02T21:34:17","date_gmt":"2019-04-02T19:34:17","guid":{"rendered":"https:\/\/virtualguru.cz\/?p=409"},"modified":"2019-04-02T21:34:17","modified_gmt":"2019-04-02T19:34:17","slug":"nastaveni-vcenter-psc-jako-intermediate-autority","status":"publish","type":"post","link":"https:\/\/virtualguru.cz\/en\/2019\/04\/02\/nastaveni-vcenter-psc-jako-intermediate-autority\/","title":{"rendered":"Nastaven\u00ed vCenter PSC jako intermediate autority"},"content":{"rendered":"<p>Od verze vSphere 6.0, resp vCentru, je sou\u010d\u00e1st\u00ed Platform Services Controlleru i certifika\u010dn\u00ed autorita. Ta vyd\u00e1v\u00e1 certifik\u00e1ty pro v\u0161echny p\u0159ipojen\u00e9 slu\u017eby (ESX hosty, WebClienta, &#8230;) a star\u00e1 se i o jejich renewal.<\/p>\n<p>Oproti verz\u00edm p\u0159edchoz\u00edm, kdy jste museli v\u0161echny certifik\u00e1ty generovat ru\u010dn\u011b, se t\u00edmto velmi zjednodu\u0161uje pr\u00e1ce s certifik\u00e1ty. T\u00edm i bezpe\u010dnost prost\u0159ed\u00ed, pokud pot\u0159ebujete m\u00edt v\u0161echnu komunikaci v prost\u0159ed\u00ed korektn\u011b \u0161ifrovanou a zabezpe\u010denou.<\/p>\n<p>Cel\u00fd postup si uk\u00e1\u017eeme v n\u011bkolika kroc\u00edch:<\/p>\n<ul>\n<li><a href=\"#1\">Vytvo\u0159en\u00ed \u0161ablony v Microsoft CA<\/a><\/li>\n<li><a href=\"#2\">Publikace \u0161ablony<\/a><\/li>\n<li><a href=\"#3\">Vygenerov\u00e1n\u00ed Certificate Signing Request ve vCSA<\/a><\/li>\n<li><a href=\"#4\">Vlo\u017een\u00ed podepsan\u00e9ho certifik\u00e1tu do vCSA<\/a><\/li>\n<\/ul>\n<ol>\n<li id=\"1\">nejprve je t\u0159eba vytvo\u0159it \u0161ablonu v CA pro certifik\u00e1t pou\u017eit\u00fd pro Intermediate CA. J\u00e1 jsem pou\u017eil Microsoft CA\n<ol>\n<li>Nejjednodu\u0161\u0161\u00ed jak se dostat ke spr\u00e1v\u011b \u0161ablon je p\u0159\u00edkazem: <strong>certtmpl.msc<\/strong><br \/>\n<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-305.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-418\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-305-300x159.png\" alt=\"\" width=\"300\" height=\"159\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-305-300x159.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-305.png 419w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>Ud\u011bl\u00e1me si duplik\u00e1t \u0161ablony <strong>Subordinate Certification Authority<\/strong><br \/>\n<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-307.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-420\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-307-300x228.png\" alt=\"\" width=\"300\" height=\"228\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-307-300x228.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-307-768x583.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-307.png 963w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>Kv\u016fli zp\u011btn\u00e9 kompatibilit\u011b <strong>Win2003<\/strong><br \/>\n<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-308.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-421\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-308-300x228.png\" alt=\"\" width=\"300\" height=\"228\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-308-300x228.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-308-768x583.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-308.png 963w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>Pojmenujeme Template, zkontrolujeme dobu platnosti (mus\u00ed b\u00fdt del\u0161\u00ed ne\u017e na jakou budeme vystavovat certifik\u00e1ty), a vypublikov\u00e1n\u00ed do AD<br \/>\n<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-309.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-411\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-309-300x228.png\" alt=\"\" width=\"300\" height=\"228\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-309-300x228.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-309-768x583.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-309.png 963w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>V r\u00e1mci z\u00e1lo\u017eky <strong>Extensions<\/strong> zkontrolujeme \u00fa\u010dely pou\u017eit\u00ed<br \/>\n<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-310.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-412\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-310-300x228.png\" alt=\"\" width=\"300\" height=\"228\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-310-300x228.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-310-768x583.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-310.png 963w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<\/ol>\n<\/li>\n<li id=\"2\">Vypublikovat \u0161ablonu pro Enrollment\n<ol>\n<li>spust\u00edme si certificate manager op\u011bt p\u0159\u00edkazem: <strong>certsrv.msc<\/strong><br \/>\n<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-312.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-414\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-312-300x160.png\" alt=\"\" width=\"300\" height=\"160\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-312-300x160.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-312.png 417w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>P\u0159id\u00e1me novou \u0161ablonu, abychom ji mohli pou\u017e\u00edt\n<p style=\"text-align: center;\"><a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-314.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-416 alignnone\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-314-300x208.png\" alt=\"\" width=\"300\" height=\"208\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-314-300x208.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-314-768x532.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-314.png 770w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a> <a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-315.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-417 alignnone\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-315-300x208.png\" alt=\"\" width=\"300\" height=\"208\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-315-300x208.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-315-768x532.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-315.png 770w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<\/li>\n<\/ol>\n<\/li>\n<li id=\"3\">Nyn\u00ed m\u016f\u017eeme vygenerovat Certificate Signing Request\n<ol>\n<li>p\u0159ihl\u00e1s\u00edte se na vCenter server p\u0159es SSH, nebo konzoli. D\u00e1le je t\u0159eba spustit certification manager<br \/>\n<code class=\"EnlighterJSRAW\" data-enlighter-language=\"null\">\/usr\/lib\/vmware-vmca\/bin\/certificate-manager<\/code><br \/>\n<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-317.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-422\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-317-300x142.png\" alt=\"\" width=\"300\" height=\"142\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-317-300x142.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-317-768x364.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-317.png 988w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>V r\u00e1mci certification Manageru zvol\u00edme volbu <strong>2<\/strong> pro vygenerov\u00e1n\u00ed Certificate Signing Requestu (CSR). Mus\u00edte zadat u\u017eivatele a heslo, kter\u00fd m\u00e1 opr\u00e1vn\u011bn\u00ed k certifika\u010dn\u00ed autorit\u011b. B\u011b\u017en\u011b je to u\u017eivatel Administrator@vsphere.local. Pak vypln\u00edme jednotliv\u00e9 polo\u017eky certifik\u00e1tu.\n<p align=\"center\"><a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-319.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-424 alignnone\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-319-300x142.png\" alt=\"\" width=\"300\" height=\"142\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-319-300x142.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-319-768x364.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-319.png 988w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a> <a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-320-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"size-medium wp-image-427 alignnone\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-320-1-300x142.png\" alt=\"\" width=\"300\" height=\"142\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-320-1-300x142.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-320-1-768x364.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-320-1.png 988w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<\/li>\n<li>Posledn\u00ed krok v certification manageru je vygenerov\u00e1n\u00ed kl\u00ed\u010de a CSR do souboru (<strong>volba\u00a01<\/strong>). Zde zad\u00e1me cestu, kam se maj\u00ed soubory ulo\u017eit.<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-322-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-428\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-322-1-300x142.png\" alt=\"\" width=\"300\" height=\"142\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-322-1-300x142.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-322-1-768x364.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-322-1.png 988w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>CSR soubor nyn\u00ed mus\u00edme st\u00e1hnout a nechat podepsat certifika\u010dn\u00ed autoritou.<br \/>\nJ\u00e1 k tomu pou\u017eil WinSCP. Pokud jste ale nezm\u011bnili default shell, tak je t\u0159eba jej zm\u011bnit na bash, jinak se v\u00e1m objev\u00ed n\u00e1sleduj\u00edc\u00ed hl\u00e1\u0161ka.<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/11\/obr\u00e1zek-503.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-621\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/11\/obr\u00e1zek-503-300x147.png\" alt=\"\" width=\"300\" height=\"147\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/11\/obr\u00e1zek-503-300x147.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/11\/obr\u00e1zek-503.png 467w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><br \/>\nP\u0159ihl\u00e1sit se p\u0159es SSH na vCenter server, p\u0159epnout se do bashe a nastavit bash jako default<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"null\">shell\r\nchsh\r\n\/bin\/bash<\/pre>\n<p><a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/03\/obr\u00e1zek-603.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-776\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/03\/obr\u00e1zek-603-300x150.png\" alt=\"\" width=\"300\" height=\"150\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/03\/obr\u00e1zek-603-300x150.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/03\/obr\u00e1zek-603.png 431w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>Nyn\u00ed je t\u0159eba sta\u017een\u00fd Certificate Signing Request (CSR) podepsat certifika\u010dn\u00ed autoritou. Pokud pou\u017eijete Windows CA, tak je mo\u017eno z windows stanice certifik\u00e1t podepsat i z p\u0159\u00edkazov\u00e9 \u0159\u00e1dky. Parametr CertificateTemplate je ten, kter\u00fd jsme si vytv\u00e1\u0159eli o n\u011bkolik krok\u016f v\u00fd\u0161e, soubor .csr je ten, co jsme si st\u00e1hli z vCenter.\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"null\">certreq.exe -attrib \"CertificateTemplate:vSphere6.xVMCA\" -submit .\\vmca_issued_csr.csr<\/pre>\n<p>Vygenerovan\u00fd certifik\u00e1t m\u016f\u017eeme p\u0159es WinSCP nakop\u00edrovat zp\u011bt a nesm\u00edme zapomenout i na RootCA certifik\u00e1t, kter\u00fd si st\u00e1hneme z certifika\u010dn\u00ed autority.<\/li>\n<\/ol>\n<\/li>\n<li id=\"4\">A te\u010f u\u017e certifik\u00e1t vlo\u017e\u00edme do vCSA\n<ol>\n<li>Mus\u00edme certifik\u00e1ty spojit do jednoho, proto\u017ee je pot\u0159eba, aby tam byl zm\u00edn\u011bn cel\u00fd \u0159et\u011bzec certifik\u00e1t\u016f a\u017e po ko\u0159enovou certifika\u010dn\u00ed autoritu. Prvn\u00ed je certifik\u00e1t samotn\u00fd a pak postupn\u011b v\u0161echny a\u017e po ko\u0159enovou autoritu, kter\u00e1 bude a\u017e \u00fapln\u011b na konci.<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-329.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-431\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-329-300x35.png\" alt=\"\" width=\"300\" height=\"35\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-329-300x35.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2018\/08\/obr\u00e1zek-329.png 645w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>Op\u011bt spust\u00edme certificate-manager, tentokr\u00e1t ale nebudeme ji\u017e generovat CSR, ale budeme pokra\u010dovat v importu<a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/03\/obr\u00e1zek-355.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-793\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/03\/obr\u00e1zek-355-300x174.png\" alt=\"\" width=\"300\" height=\"174\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/03\/obr\u00e1zek-355-300x174.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/03\/obr\u00e1zek-355-768x446.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/03\/obr\u00e1zek-355.png 867w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/li>\n<li>Pot\u00e9 u\u017e by m\u011blo v\u0161e proj\u00edt bez probl\u00e9m\u016f, v\u0161echny certifik\u00e1ty by m\u011bly b\u00fdt vym\u011bn\u011bny a vy byste se m\u011bli kochat korektn\u011b zabezpe\u010den\u00fdm spojen\u00edm.<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n<p><a href=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/04\/obr\u00e1zek-604.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-medium wp-image-808\" src=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/04\/obr\u00e1zek-604-300x197.png\" alt=\"\" width=\"300\" height=\"197\" srcset=\"https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/04\/obr\u00e1zek-604-300x197.png 300w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/04\/obr\u00e1zek-604-768x506.png 768w, https:\/\/virtualguru.cz\/wp-content\/uploads\/2019\/04\/obr\u00e1zek-604.png 837w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>NOTE:<\/p>\n<p>Kdy\u017e jsem aktualizoval certifik\u00e1ty ve sv\u00e9m prost\u0159ed\u00ed, stala se mi chyba.<\/p>\n<p>V logu <code class=\"EnlighterJSRAW\" data-enlighter-language=\"null\">cat \/var\/log\/vmware\/vmcad\/certificate-manager.log<\/code>\u00a0bylo vid\u011bt n\u00e1sleduj\u00edc\u00ed:<\/p>\n<pre class=\"EnlighterJSRAW\" data-enlighter-language=\"null\">2019-03-28T15:41:15.269Z INFO certificate-manager lstool command currently being executed is : ['\/usr\/java\/jre-vmware\/bin\/java', '-Djava.security.properties=\/etc\/vmware\/java\/vmware-override-java.security', '-cp', '\/usr\/lib\/vmidentity\/tools\/lib\/lookup-client.jar:\/usr\/lib\/vmidentity\/tools\/lib\/*', '-Dlog4j.configuration=tool-log4j.properties', 'com.vmware.vim.lookup.client.tool.LsTool', 'get', '--no-check-cert', '--url', 'https:\/\/sa-vcsa-01.vclass.local\/lookupservice\/sdk', '--id', '79e1822f-b6fe-4327-8cc9-484dd91af28e_com.netapp.nvpf.webclient', '--as-spec']\r\n2019-03-28T15:41:16.517Z ERROR certificate-manager 'lstool get' failed: 1\r\n2019-03-28T15:41:16.518Z INFO certificate-manager Error while reverting certificate for store : MACHINE_SSL_CERT\r\n2019-03-28T15:41:16.518Z ERROR certificate-manager Error while performing rollback operation, please try Reset operation...\r\n2019-03-28T15:41:16.518Z ERROR certificate-manager please see \/var\/log\/vmware\/vmcad\/certificate-manager.log for more information.\r\n<\/pre>\n<p>Dlouho jsem hledal v \u010dem m\u016f\u017ee b\u00fdt probl\u00e9m. Nakonec jsem postupoval n\u00e1sledovn\u011b:<\/p>\n<p>Posledn\u00ed certifik\u00e1t, kter\u00fd se sna\u017eil z\u00edskat byl pro slu\u017ebu\u00a0&#8217;79e1822f-b6fe-4327-8cc9-484dd91af28e_<strong>com.netapp.nvpf.webclient<\/strong>&#8218;<\/p>\n<p>Obdebral jsem tedy tuto extension p\u0159es MOB viz\u00a0<a href=\"https:\/\/kb.vmware.com\/s\/article\/1025360\">https:\/\/kb.vmware.com\/s\/article\/1025360<\/a><\/p>\n<p>Jakmile jsem odebral tuto extension, tak v\u0161echno u\u017e pro\u0161lo bez probl\u00e9m\u016f.<\/p>\n<p>Zdroj:\u00a0<a href=\"https:\/\/kb.vmware.com\/kb\/2112009\">https:\/\/kb.vmware.com\/kb\/2112009<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Od verze vSphere 6.0, resp vCentru, je sou\u010d\u00e1st\u00ed Platform Services Controlleru i certifika\u010dn\u00ed autorita. Ta vyd\u00e1v\u00e1 certifik\u00e1ty pro v\u0161echny p\u0159ipojen\u00e9 slu\u017eby (ESX hosty, WebClienta, &#8230;)&#8230;<\/p>\n<div class=\"more-link-wrapper\"><a class=\"more-link\" href=\"https:\/\/virtualguru.cz\/en\/2019\/04\/02\/nastaveni-vcenter-psc-jako-intermediate-autority\/\">Continue Reading<span class=\"screen-reader-text\">Nastaven\u00ed vCenter PSC jako intermediate autority<\/span> <i class=\"fas fa-angle-right\"><\/i><\/a><\/div>","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"iawp_total_views":74,"footnotes":""},"categories":[3],"tags":[25,26,11,7,19,27,9],"class_list":["post-409","post","type-post","status-publish","format-standard","hentry","category-vsphere","tag-certificate","tag-ssl","tag-troubleshooting","tag-vcenter","tag-vcsa","tag-vmca","tag-vsphere","entry"],"_links":{"self":[{"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/posts\/409","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/comments?post=409"}],"version-history":[{"count":27,"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/posts\/409\/revisions"}],"predecessor-version":[{"id":823,"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/posts\/409\/revisions\/823"}],"wp:attachment":[{"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/media?parent=409"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/categories?post=409"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualguru.cz\/en\/wp-json\/wp\/v2\/tags?post=409"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}