Specifications

Table Of Contents
VMware, Inc. 91
Chapter 4 Managing Virtual Machines and the VMware Server Host
automatically!redirects!users!to!this!URL!if!they!use!the!insecure!URL!
(http://<hostname>:8222)!to!connect.!A!lock!icon!appears!in!the!status!bar!of!the!
browser!window.
If!you!disable!SSL,!users!are!automatically!redirected!to!http://<hostname>:8222!if!
they!use!https://<hostname>:8333!to!connect!to!the!management!interface.
NOTE If!SSL!is!disabled!and!then!enabled!again,!any!new!management!interface!
connections!to!the!non!secure!port!(8222)!are!not!redirected.
Using Your Own Security Certificates
You!can!use!your!own!security!certificate!when!you!enable!SSL.
On!a!Windows!host,!run!the!Microsoft!Management!Console!(mmc.exe)!and!select!your!
certificate.!When!you!upgrade!the!VMware!Management!Interface!on!a!VMware!Server!
for!Windows!host,!you!must!reassign!your!certificate!to!the!VMware!Management!
Interface.
On!a
!Linux!host,!the!VMware!Management!Interface!certificate!must!be!placed!in!
/etc/vmware-mui/ssl.!The!certificate!consists!of!two!files:!the!certificate!file!(mui.crt)!
and!the!private!key!file!(mui.key).!The!private!key!file!should!be!readable!only!by!the!
root!user.
When!you!upgrade!the!VMware!Management!Interface!on!
a!Linux!host,!the!certificate!
remains!in!place.!In!case!you!removed!the!VMware!Management!Interface,!the!
directory!is!not!removed!from!your!host.
Enabling and Disabling SSL for Remote Sessions
You!enable!and!disable!SSL!for!VMware!Server!Console!connections!in!the!console!or!
the!management!interface.!You!enable!SSL!for!VMware!Management!Interface!
connections!in!the!management!interface.!By!default,!SSL!is!enabled!for!all!remote!
connections.
The!certificates!used!in!these!secure!sessions!are!not!signed!by!a!trusted!
certificate!
authority.!Therefore!they!do!not!provide!authentication.To!use!encrypted!remote!
connections!externally,!consider!purchasing!a!certificate!from!a!trusted!certificate!
authority.
To!change!SSL!settings!for!console!and!management!interface!connections!from!the!
VMware!Management!Interface,!see!“Securing!Remote!Connections!with!SSL”!on!
page 112.
To!change!the!SSL!setting!for!console
!connections!from!the!VMware!Server!Console,!
see!“Enabling!SSL!for!VMware!Server!Console!Connections”!on!page 125.