Blog post "vCO Workflow to automate certificate generation process.

In this post we'll take a look in a workflow that can help to automate the generation of certificate. Certificates that are generated from the vCO/vRO workflow are standard certificates that can be used with the VMware products or for any other use or software. Here are some files that can be produced by the workflow

file Setup - openssl.cfg - OpenSSL

-rui.crt - CRT certificate

-rui.csr - Certificate Signing Request.

certificate - rui.key - private key from an individual (PEM formatted)

-rui.p12 - PKCS12 package containing the private key and CRT.

-rui.p7b - PKCS7 package containing CRT

-rui.pem - PEM certificate with the private key

-rui orig.key - private key of a specific certificate


Most aspects of certificate and properties, such as subject alternative names (SAN) are customizable during execution.

We will take a peek into little opportunities that offer the workflow in this package:

Use case 1: create the certificate request file - in the first use case, we will use the workflow in the package to create the certificate request (.) CSR file). This file can then be used by administrators to generate an internal enterprise CA certificate form or send to external public certificate authorities that will generate the certificate instead.

Use case 2: convert a certificate in the PEM - in the second case, we will use the workflow in the package to convert an existing certificate. Certificate PEM. Let's say that you have received a certificate, you must use on your device to VMware. To use this certificate, you must convert to PEM Format to be used by the device. It can be a certificate .cer or a PKCS12 (P12) or the PKCS7 (P7B) certificate package containing the certificate.

Use case 3: using the "generate certificate: WF to automate the end-to-end process - in the third case we will use a workflow to automate the process of generation of certificate to - end of use.» Since the creation of the OpenSSL configuration file, create a certificate request file, this submission to a certification authority, on receipt of the generated certificate, converting to usable Linux PEM format and finally export the certificate package.


Best regards

Kaloferov spas

... and here is the link

vCO Workflow to automate certificate generation process

vCO Workflow to automate certificate generation process. Kaloferov spas & #039; s Blog

BR, Spas

Tags: VMware

Similar Questions

  • Application of automatic certificate for local system failed (0x800706ba) the RPC server is unavailable.

    I get these errors on some Windows 7 machine "registration of automatic certificate for local system failed (0x800706ba) the RPC server is unavailable" ID of the 6 event and event ID 13

    "Registration certificate for Local system failed to enroll for a certificate of computer with application ID N/A dc.contoso.com\contoso-DC-CA (the RPC server is unavailable." 0X800706BA (WIN32: 1722)). »

    other windows XP, Windows 8 and windows machine 7 receive the certificate through auto-enrollment.

    Hi Sam,

    Thanks for posting your query in the Microsoft Community Forums.

    Because the issue is limited to with RPC server, it is better suited for the IT Pro TechNet public. Please ask your question in the Forum on TechNet Support. You can follow the link to your question:
    I hope it helps. If you have problems in the future, please let us know. We will be happy to help you.
  • vCAC 6 - How to add users to a group of commissioning of a vCO workflow?

    I'm trying to drop users into roles in a group of Provisioning (Business Group) in a vCO workflow. Does anyone have advice on how I can achieve this?

    I'm already reading/add/update custom fields, but the action of logEntityDetails() shows not all entries under 'Complex properties', users.

    Examples of VMware how to create PG, but not how to add users.

    Just to answer my own question, since I posted it the vCAC 6.0.1 for vCO plugin was released, which introduced a whole new bunch of features through vCACCAFE, including the manipulation of Provisioning groups (company) members.

  • Notifications of comments for the blog post

    Is it possible in Business Catalyst to allow the visitor to the site to subscribe to a particular blog post comments? For example, if a visitor posts a blog comment it will automatically receive notice if someone posts a comment in this thread.

    If there is no such feature in Business Catalyst, is there another way to implement this?

    Any advice would be greatly appreciated. Thank you.

    Hey there, this feature doesn't is not supported by the BC British Colombia comments feature.

    If you are using the facebook comments then people will get messages when people reply to their comment.

  • VMSnapshot age VCO Workflow

    I'm deleting snapshots of a certain age in a certain folder via a VCO workflow. I watched the workflow that comes standard with the library and other examples. Comes with those that they loop through every snapshot of each VM in each folder. In my environment that is literally thousands of snapshots (snapshots are used incorrectly in this environment - but that's another story for another forum) and it takes a lot of time to go through loops. My workflow now crosses all virtual machines in a specifc VC:VMFolder and gets all the VC:VirtualMachineSnapshot object for each virtual computer. I need a way to find the age of individuals VC:VirtualMachineSnapshot. Y at - it an easy/fast way to do it rather than brute force through each snapshot in the system?


    created var = thisSnapshot.creationTime ();? It would be great.

    Thank you all.

    By using com.vmware.library.vc.vm.snapshot.getAllSnapshotsOfVM () as a base action script code, here's how to enumerate all the snapshots of your virtual machine and print their identity papers and the moment where they have been taken:

    // 'vm' is the input parameter - the virtual machine object
    var snapshots = new Array();
    if (vm.snapshot) {
        var snapshotTrees = vm.snapshot.rootSnapshotList;
        for (i in snapshotTrees) {
            getSnapshotsOfVM(snapshotTrees[i]);
        }
    }
    
    function getSnapshotsOfVM(tree) {
        snapshots.push([tree.snapshot, tree.createTime]); // store a tupple of the snapshot and its creation time
        var trees = tree.childSnapshotList;
        if (trees != null) {
            for (index in trees) {
                if (trees[index] != null)
                    getSnapshotsOfVM(trees[index]);
            }
        }
    }
    
    // Print the results
    for each (var s in snapshots) {
        System.log("Snapshot: '" + s[0].id + "' created on: '" + s[1] + "'");
    }
    

    If you do not want to collect the creation time for all snapshots of your virtual machine, but the only moment in the creation of a given snapshot, then just add a single cheque to add line 11 to compare the attribute id of your snapshot with the attribute id of the snapshot processing tree.snapshot.

  • View all blog posts in the main list

    Hello world

    I'm not very familiar with BC, so I'm having a bit of trouble getting my head around the anatomy of the it.

    Basically, what is happening here is that there are 15 blog posts in total, but post on the main page of the blog, only 10. I can't seem to find where I can change how it is displayed, can someone point me in the right direction?

    Thanks for any input.

    In the overall layout of blog:
    Overall layout of blog | Developers of business catalyst

    After the tag list, the setting for a number of positions.

  • Get the answer from a url - vCO workflow

    Hello

    Is possible to get the answer to a url if a vCO workflow? I want to check the status of keepalive on a Web server to see if the instance is running or not. All I want is to hit the url, say ""https://webserverfqdn:port/keepalive.html/"and analysis the answer to understand the Web server is running." I don't want SSH to the Server Web query status. It is very before starlight in javascript using xmlHTTPRequest. But, how can I do this using vRO?

    Thank you

    Here you go:

    var website = new URL("https://webserverfqdn:port/keepalive.html");
    var content = website.getContent();
    

    Now 'content' is a string that contains your Web site content that you can now analyze as you wish.

  • How to obtain the list of the vCAC host attached to the VCO in the VCO workflow

    Is it possible to get a list of all host vCAC attached to vCenter Orchestrator in the VCO workflow?

    Yes:

    vcacHosts = Server.findAllForType("VCACCAFE:VCACHost");
    
  • VCo workflow to clone a virtual machine of centos. Network interface problem

    Hello

    I use vco workflows to clone a virtual machine of vcenter. The virtual machine is running centos 6.0. When cloning is complete. I see the network eth0 and eth1 interfaces set correctly the static gateway ip and address information I provided. I deleted the 70 - persistent - net .rules on the basic vm form which I clone. So, I get the correct interface names. But when vm powers on and I run "ifconfig eth0" I don't see the IP address of this interface has all the details.  same for the other interface also.

    But if I do a system restart network without changes to networking and then do an ifconfig I see the IP with the previous information.   I don't know why the service network restart is necessary so that he can recognize the ip address.

    Any ideas what I could do wrong. or to avoid this manual step of the execution of the service network restart command on the creation of the vm.

    Thank you

    Kiran

    Yes I'm restarting after after the application of customization.

    Has been able to solve the problem... In CentOS, the network service does not work by default. This is why it does not have network interfaces at startup. So now the machine instant, I started the network services and stop the Network Manager service

    using chkconfig network on

    chkconfig NetworkManager off

    and then cloned from this virtual machine... and apply the customization settings. during the start now it shows the interfaces properly without needing a service restart

  • Blog post content lost paragraph breaks

    Hello

    I encounter a weird problem that I can't figure out yet. I added some blog posts and in the content of post window they show up as expected and tagged correctly (Fig. 1). However, when I find the post in the blog, everything is put together (fig. 2). Any thoughts on why this might happen? It was like that before I even did something extra style on the blog site. Any help is greatly appreciated.

    FIG. 1

    Screen Shot 2015-08-19 at 11.49.06 PM.png

    FIG. 2

    Screen Shot 2015-08-20 at 12.10.47 AM.png

    I thought about it.  Commenting out margin: 0; of the class p in my global.css fixed.

    body, div, dl, dt, dd, ul, ol, li, nav, h1, h2, h3, h4, h5, h6, pre, code, form, fieldset, legend, entry, butto n, textarea, p, blockquote, th, td, one

    {

    / * margin: 0; * /

    padding: 0;

    border-width: 0;

    -webkit-transform-origin: left top;

    -ms-transform-origin: left top;

    -o-transform-origin: left top;

    Transform-origin: left top;

  • vCO workflow: create a virtual machine from a model and then ask the user about the CPU, memory size...

    Hi guys,.

    I am trying to create a workflow with vCO that can do the job for me:

    -Create a virtual machine (or maybe a several virtual machines) from a model (the model is in vCenter, of course)

    -L' user who is running the workflow has the thr right to say what he wants for the CPU, the memorysize, the disksize

    Any help?

    I found some workflows in the library can seem to do something similar to what I want, but since I'm a beginner I'd rather have your advice

    Hello there and welcome to vCenter Orchestrator

    Take a look at this series of tutorials to get an idea of how start:

    Create a vCO simple self-service VM Provisioning Portal - part 1

    Create a vCO simple self-service VM Provisioning Portal - part 2

    Create a Simple Self Service VM Provisioning Portal vCO - part 3

    The general approach to take would be to determine which of the clone (or clone and customize) workflows adapts to your nearest need (see your customer vCO: workflows\Library\vCenter\Virtual Machine management\Clone\)

    Then, create a NEW WORKFLOW that calls this one... after that your clone operation is complete, keep the computer turned off virtual and add feeds of extra work from the library to your new workflow that do things like change the amount of Ram, adds disks, change CPU, etc...

    Be sure to watch the videos on http://www.vmwarelearning.com/orchestrator to get a basic understanding of the use of vCO.

  • Import/export of blog posts

    I intend to host my blog with square space and I was wondering if anyone has had experience with export of British Colombia blog posts to the square space?

    Here's what the square space says about this: the import content of Tumblr - help


    If this is not the case, what are my options? I have to do it manually? How will this affect my SEO?

    probably they running RS power that will be in a specific way for the options to import it it lists. BC is not one of those, so you can't run this automated tool.

    If they have no method of the API or standard RSS feed importing tool outside these options you can only do it manually.

  • In the face of the question and try to set the affinity through VCO workflow rule

    In the face of the question then to attempt to set the affinity through VCO workflow rule I'm trying to write workflow VCO to set up the level of affinity of cluster, but it throws the error message cannot convert ClusterComputeResource 'mycluster' to com.vmware.vim.vi4.ClusterConfigSpec (Workflow: create vm-virtual machine affinity rule / Scriptable task (item1) #19) my script to workflow is var rule = new VcClusterAntiAffinityRuleSpec(); Rule.Key = - 30; Rule.enabled = true; Rule.Name = ruleName; rule.userCreated = true; Rule.VM = MV; var clusterSpecRules = new Array(); var clusterSpecRule = new VcClusterRuleSpec(); clusterSpecRule.operation = VcArrayUpdateOperation.add; clusterSpecRule.info = rule; clusterSpecRules.push (clusterSpecRule); var clusterSpec = new VcClusterConfigSpec(); clusterSpec.rulesSpec = clusterSpecRules; var m = computeCluster.vimHost //spec = task = computeCluster.reconfigureCluster_Task (computeCluster, spec, true); Note: In the above code, what are the entry parameter computeCluster entered type parameter VC:clusterComputeResource ruleName is a parameter of type String - APR

    Here is the code I use, give it a shot.

    var affinitySpec = new VcClusterAffinityRuleSpec();
    affinitySpec.enabled = true;
    affinitySpec.name = att_ruleName;
    affinitySpec.userCreated = true;
    affinitySpec.vm = att_vmArray;

    var clusterRuleSpec = new Array (new VcClusterRuleSpec());
    clusterRuleSpec [0] = new VcClusterRuleSpec()
    .operation clusterRuleSpec [0] = VcArrayUpdateOperation.add;
    clusterRuleSpec [0] .info = affinitySpec;

    var clusterConfigSpec = new VcClusterConfigSpecEx();
    clusterConfigSpec.rulesSpec = clusterRuleSpec;

    att_task = att_clusterComputeResource.reconfigureComputeResource_Task (clusterConfigSpec, true);

  • Simple blog post

    I am trying to add asinglre blog post to a web page outside the blog page

    It should look like this.

    "

    Blog title lorem ipsum

    Blog post text lorem ipsum lorem ipsum lorem ipsum lorem ipsum lorem ipsum lorem ipsum lorem ipsum lorem ipsum

    Lorem ipsum lorem ipsum lorem ipsum lorem ipsum lorem ipsum lorem ipsum lorem ipsumlorem ipsum lorem ipsum

    Lorem ipsumlorem ipsum lorem ipsumlorem ipsum lorem ipsum lorem ipsum lorem ipsum lorem ipsum lorem ipsum

    Lorem ipsum lorem ipsum...

    Continue reading

    "

    and wen of the person click continue readfing it redirects to the blog post on the blog page.

    How is that possible?

    is there any tag who does that and who works next to the blog page?

    Ok! Well, do as I suggested: create a category called recommended and mark desired feature. Then you export all the blogs by category and select feature. If you do not problems with the blog layout, simply create a personal template .tpl for this case. This is how we usually solve this problem.

  • I did a blog in adobe muse and his now adjust it in British Colombia, but I can't seem to change the date format of blog post?

    I did a blog in adobe muse and his now adjust it in British Colombia, but I can't seem to change the date format of blog post?

    My ideal date format would be / 28, Oct 2015

    can anyone help? I don't know that I can handle the {tag_postdate}

    You can use something like this in the post or poster list: {tag_blogpostday}, {tag_blogpostmonth}, {tag_blogpostyear}

Maybe you are looking for