This is the English version of my previous post as it may help many many people 
So what you need is :
1 -A CA Server, in my case I installed the following role on a Windows 2008 R2 AD controler :
- Certification Authority
- Certification Authority Web Enrollment
2 – OpenSSL to create certificates, personal I mounted a Windows 2003 R2 32-bit using Win32 OpenSSL 1.0.1c (some have had problems with Win64 OpenSSL).
Once everything are ready :
1 – We generate the private key and the .csr file: (a council type the following command : SET OPENSSL_CONF=C:\OpenSSL-Win32\bin\openssl.cfg)
# openssl.exe req -newkey rsa:2048 -keyout <hostname>.key -nodes -days 3650 -out <hostname>.csr
Like :
Note: I don’t set anything for « Challenge password » or for « An optional company name » and be careful to put the fqdn of View Connection Server to the « Common Name »
2 -After editing the file <hostname>.csr and makes a « copy » of its contents, connect to the server certificate using IE or Firefox (or what ever you want):
Select : « Advanced certificate request »
Select: « Submit a certificate request ….. »
Past the content of the .csr file and select « Web Server » as template.
Retrieve the signed certificate and name it <hostname>.crt (Select Base 64 encoded) :
Cop the file to C:\OpenSSL-Win32\bin\
Execute the following command :
# openssl.exe pkcs12 -export -in <hostname>.crt -inkey <hostname>.key -name vdm -passout pass:testpassword -out <hostname>.pfx
Example :
Now copy the generated <hostname>.pfx file on the View Connection Server and :
Start mmc:
Add Snap-In « Certification »
Choose « Computer account » then « Local Computer »
Import <hostname>.pfx certificate :
Type password (testpassword dans notre cas)
And then rename the « Friendly Name » of the previous certificate to what you want (vdmold in my case)
Now restart the « VMwareVDMDS » (Restarting this services will restart all View Services).
Now do the same thing for all View Connection Server, View Security Server, Composer (for this one there is no « Friendly Name »).
Note : I personally recommend to create and import certificates before installing View 5.1 ,like this it will use the signed certificate instead of creating one.
