In a lot of the course I teach, the physical equipment is often a long distance away. We usually connect to it by Citrix or Terminal Services – and use the ILO+Virtual Media (or even physical CD duck-tapped into the drives!) to carry out the ESX install in classroom exercises. I now have a similiar system of my own – my own personal VDC (Virtual DataCenter) if you like. It consists of 4 HP Proliant DL385 (AMD Dual-Core) and two Dell 1U server which run the virtual machines needed to work remotely (Domain Controllers (x2), Citrix Servers (x2) Microsoft SQL and VirtualCenter).
One thing that has always annoyed me about using ILOs was the number of SSL certificate security prompts. Before beginning this post I thought I would count them. There were 1 prompts for the logon page and 3 for the Java security if you use the untrusted auto-signed SSL Certificates created by the ILO – there was also 1 prompt for using virtual media. That 4 prompts altogether!
So last week I took a look at creating my own self-trusted certificates for my VDC. As Citrix MetaFrame across the internet needs certificates to work, I’ve always run my own root Certificate Authority rather than paying for certificates from an ISP or Verisign – plus its more fun to do your own security. I found the process was suprisingly easy, and wondered why more “VDC” environments didn’t do this as well. Here’s how its done
(more…)