Platform Services Controller includes scripts for generating CSRs, managing certificates and managing services.

About this task

For example, you can use the certool utility to generate CSRs and to replace certificates, both for scenarios with embedded Platform Services Controller and for scenarios with external Platform Services Controller. See Managing Certificates with the vSphere Certificate Manager Utility.

Use the CLIs for management tasks that the Web interfaces do not support, or to create custom scripts for your environment.

Table 1. CLIs for Managing Certificates and Associated Services

CLI

Description

Links

certool

Generate and manage certificates and keys. Part of VMCA.

certool Initialization Commands Reference

vecs-cli

Manage the contents of VMware Certificate Store instances. Part of VMAFD.

vecs-cli Command Reference

dir-cli

Create and update certificates in VMware Directory Service. Part of VMAFD.

dir-cli Command Reference

sso-config

Utility for configuring smart card authentication.

vCenter Server Two-Factor Authentication

service-control

Command for starting, stopping, and listing services.

Run this command to stop services before running other CLI commands.

Procedure

  1. Log in to the Platform Services Controller shell.

    In most cases, you have to be the root or Administrator user. See Required Privileges for Running CLIs for details.

  2. Access a CLI at one of the following default locations.

    The required privileges depend on the task that you want to perform. In some cases, you are prompted for the password twice to safeguard sensitive information.

    Windows

    C:\Program Files\VMware\vCenter Server\vmafdd\vecs-cli.exe

    C:\Program Files\VMware\vCenter Server\vmafdd\dir-cli.exe

    C:\Program Files\VMware\vCenter Server\vmcad\certool.exe

    C:\Program Files\VMware\VCenter server\VMware Identity Services\sso-config

    VCENTER_INSTALL_PATH\bin\service-control

    Linux

    /usr/lib/vmware-vmafd/bin/vecs-cli

    /usr/lib/vmware-vmafd/bin/dir-cli

    /usr/lib/vmware-vmca/bin/certool

    /opt/vmware/bin

    On Linux, the service-control command does not require that you specify the path.