To authenticate the vSphere Authentication Proxy to ESXi, you must provide ESXi with the proxy server certificate.

Install the vSphere Authentication Proxy (CAM service) on a host. See Install or Upgrade vSphere Authentication Proxy.

1

On the authentication proxy server system, use the IIS Manager to export the certificate.

Option

Action

For IIS 6

a

Right-click Computer Account Management Web Site.

b

Select Properties > Directory Security > View Certificate.

For IIS 7

a

Click Computer Account Management Web Site in the left pane.

b

Select Bindings to open the Site Bindings dialog box.

c

Select https binding.

d

Select Edit > View SSL Certificate .

2

Select Details > Copy to File.

3

Select the options Do Not Export the Private Key and Base-64 encoded X.509 (CER).

Import the certificate to ESXi.