5.1

Add a CA Certificate
By adding a CA certificate, you can become an interim CA for your company. You then have the authority for
signing your own certificates.
Procedure
1 In the vSphere Client, select Inventory > Hosts & Clusters.
2 Select a datacenter resource from the inventory panel.
3 Click the Network Virtualization tab.
4 Click the Edges link.
5 Double-click a vShield Edge instance.
6 Click the Configure tab.
7 Click the Certificates link.
8
Click the Add ( ) icon and select CA Certificate.
9 Copy and paste the certificate contents in the Certificate contents text box.
10 Type a description for the CA certificate.
11 Click OK.
You can now sign your own certificates.
Configure a Self-Signed Certificate
You can create, install, and manage self-signed server certificates.
Prerequisites
Verify that you have a CA certificate so that you can sign your own certificates.
Procedure
1 In the vSphere Client, select Inventory > Hosts & Clusters.
2 Select a datacenter resource from the inventory panel.
3 Click the Network Virtualization tab.
4 Click the Edges link.
5 Double-click a vShield Edge.
6 Click the Configure tab.
7 Click the Certificates link.
8 Follow the steps below to generate a CSR.
a
Click the Generate CSR (
) icon.
b In Common name, type the IP address or fully qualified domain name (FQDN) of the vShield
Manager.
c Type your organization name and unit.
d Type the locality, street, state, and country of your organization.
vShield Administration Guide
68 VMware, Inc.