So here's what's awesome about Secure Socket Tunneling Protocol SSL VPNs: they give your connecting client an IP and make it a full-on part of the network. And this is all done over port 443, a commonly used port which is often enabled on firewalls. SSTP SSL VPNs are not like some fake "SSL VPNs" that just …

I <3 cheapsslsecurity.com. They (and probably others) sell globally recognized $5.99 annual certs. Now, all of my lab stuff (Lync/RD Gateway/NetScaler/SSL VPN) is encrypted, and I no longer have to manually install my Domain CA's root cert on my phones/other devices. They don't have an affiliate program, so I'm not …

Using a NetScaler within home lab is beneficial, mostly because you can use the same IP over and over for different services. Imagine providing VPN, Lync Autodiscover, Exchange Autodiscover, and SharePoint all over port 443. That's what a NetScaler VPX can do for you, for free. Below is a tutorial that will help you …

One of the things I love most about SuSE is how well it integrates with Active Directory. Joining a domain is easy when using yast. First I ensured that the Linux server's DNS server is pointed to my DC, then yast -> Network Services -> Windows Domain Membership. yast-wdm Note that if "Windows Domain …

After speaking with a colleague today, I expect this list will grow as I work more with the vSphere suite. But until then, here is a consolidated list of posts and scripts that I've written to ease the replacement of SSL certificates on Windows-based vSphere related products using PowerShell and a Windows Domain …

Well, this script was different. Unlike the other posts in this series, I was required to use only Microsoft command line tools instead of OpenSSL. Not that I'm opposed to using certreq and certutil -- I actually started this whole cert automation project to see if it was possible to use only these tools and …

Next in the series of replacing vSphere related SSL scripts is the VMware Site Recovery manager script. This script generates the SSL certificates based off of the WebServer Certificate Template and runs a batch file to perform the actual replacement. …

Next in the series of replacing vSphere related SSL scripts is the VMware View Composer script. This one is rather simple, and uses certutil and certreq to generate the certificates, as opposed to OpenSSL. It also generates a batch script which calls SviConfig.exe. You just gotta put in a few variables, run the script …

Ahhh, it seems like replacing SSL certificates in vSphere is a never-ending process. My vSphere farm was not prompting me about untrusted SSL certs until I installed the NetApp Virtual Storage Console. Using the template from my previous posts, however, I was able to quickly update VSC's certs using a combination of …

Replacing ESX SSL is the easiest of all the vSphere components, in my opinion. Unlike vSphere 5.1, you can use Microsoft's Web Server SSL template, and there's no need to use the Java keytool or reregister the service with SSO. Below is a script I use in conjunction with my vSphere/PowerShell Replace SSL script. This …