Add a Log Forwarder Certificate to an ESXi Host Truststore

While configuring an ESXi host, if you select SSL as the protocol to forward log events to VMware Aria Operations for Logs (SaaS), you must add the log forwarder's certificate to the ESXi host's truststore. You need to add the certificate because ESXi hosts do not accept the log forwarder's certificate automatically.

Prerequisites

Download the appropriate installer for the OpenSSL tool from https://www.openssl.org/community/binaries.html. Use the downloaded OpenSSL installer to install it on Windows.

Procedure

• ♦ Open the Command Prompt and run the following commands.

  openssl s_client -connect <CLOUD_PROXY_IP_HOSTNAME>:1514 < /dev/null | openssl x509 -outform PEM >> /etc/vmware/ssl/castore.pem
  esxcli system syslog reload
  esxcli network ip connection list | grep 1514