You can download the TLS Configuration utility from MyVMware.com and install it on your local machine. After installation, two scripts are available. One script is for configuration of vCenter Server and Platform Services Controller, and one script is for ESXi configuration.

Before you begin

You need a MyVMware account to download the script.

About this task

On the vCenter Server Appliance, vSphere Update Manager ports are updated by the script. On vCenter Server, you edit vSphere Update Manager configuration files. See Disable TLS Versions on vSphere Update Manager.

Procedure

  1. Log in to your MyVMware account and go to vSphere.
  2. Find the product and product version that you are licensed for, select VMware vCenter Server, and click Go to Downloads.
  3. Select VMware vSphere TLS Configurator and download the following file.

    OS

    File

    Windows

    VMware-vSphereTlsReconfigurator-version-build_number.x86_64.msi

    Linux

    VMware-vSphereTlsReconfigurator-version-build_number.x86_64.rpm

  4. Upload the file to vCenter Server and install the scripts.

    In environments with an external Platform Services Controller, you also upload the file to the Platform Services Controller.

    OS

    Procedure

    Windows

    1. Log in as a user with Administrator privileges.

    2. Copy the VMware-vSphereTlsReconfigurator-version-build_number.x86_64.msi file that you just downloaded.

    3. Install the MSI file.

    Linux

    1. Connect to the appliance using SSH and log in as a user who has privileges to run scripts.

    2. Copy the VMware-vSphereTlsReconfigurator-version-build_number.x86_64.rpm file to the appliance using an SCP client.

    3. If the Bash shell is not currently enabled, run the following commands.

      shell.set --enabled true
      shell
    4. Go to the directory where the uploaded rpm file is located and run the following command.

      rpm -Uvh VMware-vSphereTlsReconfigurator-version-build_number.x86_64.rpm

Results

After installation completes, you find the scripts at the following locations.

OS

Location

Windows

  • C:\Program Files\VMware\CIS\vSphereTLSReconfigurator\VcTlsReconfigurator

  • C:\Program Files\VMware\CIS\vSphereTLSReconfigurator\EsxTlsReconfigurator

Linux

  • /usr/lib/vmware-vSphereTlsReconfigurator/VcTlsReconfigurator

  • /usr/lib/vmware-vSphereTlsReconfigurator/EsxTlsReconfigurator