March 2018
Intermediate to advanced
504 pages
13h 51m
English
Content preview from VMware Cross-Cloud Architecture
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
Start your free trial
Summary
We have learned, in this chapter, how NSX Manager generates self-signed certificates for each of the hosts and controller nodes that are pushed to them over secure channels. A single CA-signed certificate will be installed for the NSX Manager to secure both the management interface and API endpoint on port 443. The vFabric RabbitMQ broker certificates, sent to the NSX Manager for communications with ESXi hosts, are uniquely generated on first boot.
NSX Manager instances on each site are configured to integrate with the vCenter SSO service associated with the vCenter Server instance to which they are bound. This facilitates the secure authentication of vCenter users within NSX for vSphere and any of the identity stores configured under ...