To authenticate the vSphere Authentication Proxy to ESXi, you must provide ESXi with the proxy server certificate.
Install the vSphere Authentication Proxy service on a host as described in Install the vSphere Authentication Proxy Service.
- On the authentication proxy server system, use the IIS Manager to export the certificate.
For IIS 6
Right-click Computer Account Management Web Site.
For IIS 7
Click Computer Account Management Web Site in the left pane.
Select Bindings to open the Site Bindings dialog box.
Select https binding.
- Select .
- Select the options Do Not Export the Private Key and Base-64 encoded X.509 (CER).
What to do next
Import the certificate to ESXi.