Import the vSphere Authentication Proxy Certificate to ESXi Host

By default, ESXi hosts require explicit verification of the vSphere Authentication Proxy certificate. If you are using vSphere Auto Deploy, the Auto Deploy service takes care of adding the certificate to hosts that it provisions. For other hosts, you must add the certificate explicitly.

Prerequisites

• Upload the vSphere Authentication Proxy certificate to a datastore accessible to the ESXi host. Using an SFTP application such WinSCP, you can download the certificate from the vCenter Server host at the following location.

  /var/lib/vmware/vmcam/ssl/rui.crt

• Verify that the UserVars.ActiveDirectoryVerifyCAMCertificate ESXi advanced setting is set to 1 (the default).

Procedure

1. Select the ESXi host and click Configure.
2. Under System, select Authentication Services.
3. Click Import Certificate.
4. Enter the certificate file path following the format [datastore]/path/certname.crt.
5. Enter the IP address of vSphere Authentication Proxy server.
6. Click OK.