Getting root certificates

The Get-HPESvtRootCertificate cmdlet returns an array of X509Certificate2 objects from the vCenter Server. This cmdlet does not require that you authenticate.

When you use this cmdlet, you must independently verify that the certificate is what you expect it to be because the command does not perform validation checks on the certificate.

Get-HPESvtRootCertificate -hmsHostname 192.0.2.2 | Format-list

Subject      : OU=VMware Engineering, O=vc-147-50-53, S=California, C=US, DC=local, DC=vsphere, CN=CA
Issuer       : OU=VMware Engineering, O=vc-147-50-53, S=California, C=US, DC=local, DC=vsphere, CN=CA
Thumbprint   : 83754908A5088D883FBC86275EF1FD964E2153C0
FriendlyName :
NotBefore    : 7/9/2017 10:48:12 PM
NotAfter     : 7/7/2027 10:48:12 PM
Extensions   : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid, System.Security.Cryptography.Oid, System.Security.Cryptography.Oid}

Use the Get-HPESvtRootCertificate cmdlet in conjunction with the Add-HPESvtCertificate cmdlet to populate the certificate trust store on the Virtual Controller.