|
1 | 1 | ## Overview |
2 | 2 |
|
3 | | -TODO Overview is a required section |
| 3 | +The certificate store type of vCenter associated with this integration implements the Inventory, Management Add, and Management Remove job types. |
4 | 4 |
|
5 | | -## Requirements |
| 5 | +The Add and Remove operations have the ability to create and remove trusted root chains and SSL certificates associated with |
| 6 | +VMware vCenter. The certificate type is automatically identified by the orchestrator. It does not manage ESXI host certificates. |
6 | 7 |
|
7 | | -TODO Requirements is an optional section. If this section doesn't seem necessary on initial glance, please delete it. Refer to the docs on [Confluence](https://keyfactor.atlassian.net/wiki/x/SAAyHg) for more info |
| 8 | +## vCenter Configuration |
8 | 9 |
|
9 | | -## Discovery Job Configuration |
| 10 | +vCenter management is controlled by the vSphere client. Follow VMware's vCenter Server Configuration [documentation](https://docs.vmware.com/en/VMware-vSphere/7.0/vsphere-esxi-vcenter-server-703-configuration-guide.pdf) to configure a vSphere client and vCenter. |
10 | 11 |
|
11 | | -TODO Discovery Job Configuration is an optional section. If this section doesn't seem necessary on initial glance, please delete it. Refer to the docs on [Confluence](https://keyfactor.atlassian.net/wiki/x/SAAyHg) for more info |
| 12 | +## Installing the extension |
12 | 13 |
|
13 | | -## Certificate Store Configuration |
| 14 | +1. Stop the Orchestrator service if it is running. |
| 15 | +1. Create a folder in your Orchestrator extensions directory called "vCenter" |
| 16 | +1. Extract the contents of the release zip file into this folder. |
| 17 | +1. Start the Orchestrator service. |
14 | 18 |
|
15 | | -TODO Certificate Store Configuration is an optional section. If this section doesn't seem necessary on initial glance, please delete it. Refer to the docs on [Confluence](https://keyfactor.atlassian.net/wiki/x/SAAyHg) for more info |
| 19 | +## vCenter Certificate Store Parameters |
16 | 20 |
|
17 | | -## Global Store Type Section |
| 21 | +To create a new certificate store in Keyfactor Command, select the _Locations_ drop down, select _Certificate Stores_, and click the _Add_ button. |
| 22 | +fill the displayed form with the following values: |
18 | 23 |
|
19 | | -TODO Global Store Type Section is an optional section. If this section doesn't seem necessary on initial glance, please delete it. Refer to the docs on [Confluence](https://keyfactor.atlassian.net/wiki/x/SAAyHg) for more info |
| 24 | +| Parameter | Value | Description | |
| 25 | +|-----------------|------------------------|-------------------------------------------------------------------------------------| |
| 26 | +| Category | 'VMware vCenter' | The name of the VMware vCenter store type | |
| 27 | +| Client Machine | vSphere Domain Name | The domain name of the vSphere client managing vCenter (ex: https://myvcenter.pki.local would use `myvcenter.pki.local` | |
| 28 | +| Store Path | 'vCenter Certificates' | The _StorePathValue_ of the vCenter instance as set during store type configuration | |
| 29 | +| Server Username | Client secret Username | The secret vCenter username used to manage the vCenter connection | |
| 30 | +| Server Password | Client Secret Password | The secret vCenter password used to manage the vCenter connection | |
20 | 31 |
|
| 32 | +## Managing vCenter Certificates |
| 33 | + |
| 34 | +This orchestrator extension allows managing both Trusted root certificates as well as SSL/TLS certificates. |
| 35 | + |
| 36 | +:warning: _Important note on certificate enrollment_ |
| 37 | + |
| 38 | +In order to enroll a new Trusted Root Certificate from the platform, follow the normal steps for enrolling a certificate into the certificate store, but do not include the private key. |
| 39 | +- If the private key is omitted, the extension assumes we are replacing the Trusted Root Certificate. |
| 40 | +- If the private key is included, the extension assumes we are replacing the TLS certificate used for SSL communication. |
0 commit comments