Establish a Standard Key Provider Trusted Connection by Exchanging Certificates

After you add the standard key provider to the vCenter Server system, you can establish a trusted connection. The exact process depends on the certificates that the key provider accepts, and on your company policy.

Prerequisites

Add the standard key provider.

Procedure

1. Navigate to the vCenter Server.
2. Click Configure and select Key Management Servers.
3. Select the key provider.
   The KMS for the key provider is displayed.
4. Select the KMS.
5. From the Establish Trust drop-down menu, select Make KMS trust vCenter.
6. Select the option appropriate for your server and follow the steps.

   Option	See
   vCenter Server Root CA certificate	Use the Root CA Certificate Option to Establish a Standard Key Provider Trusted Connection.
   vCenter Server Certificate	Use the Certificate Option to Establish a Standard Key Provider Trusted Connection.
   Upload certificate and private key	Use the Upload Certificate and Private Key Option to Establish a Standard Key Provider Trusted Connection.
   New Certificate Signing Request	Use the New Certificate Signing Request Option to Establish a Standard Key Provider Trusted Connection.