Creating a vSphere 6 certificate template in Active Directory

Signing certs for VMware has always been a pain in the ass, it’s gotten a lot better in v6 but there are a few caveats, what we’re going to do here is set up a certificate template in Active Directory from which we will sign our vCenter certificates.

Load up your AD-CA box and run:

certtmpl.msc

Next right click on Web Server and click Duplicate Template:

If you use an encryption level higher…