The edge gateway in vCloud Air supports self-signed certificates, certificates signed by a Certification Authority (CA), and certificates generated and signed by a CA.

Prerequisites
1

Log in to vCloud Air as an administrator. See Log in to vCloud Air for information.

2

Create a login session with vCloud Director. See Create a Session for a Virtual Data Center in a Service for information.

3

Using the vCloud API, query vCloud Director for the ID of the edge gateway you require certificate details for. See Querying the vCloud API for information.

Procedure
1

To retrieve the list of certificates for the edge gateway, issue the following request:

GET https://vchs.vmware.com/hybridity/api/gateways/gatewayId/certificates

In the request header, include the OATH token and the Accept header that you obtained when creating a login session: 

Accept: application/json
Content-Type: application/json
X-Vcloud-Authorization: vcloud-auth-token

If the request is successful, the server returns HTTP response code 200 and the list of certificates.

2

To retrieve the details for a specific certificate, issue the following request:

GET https://vchs.vmware.com/hybridity/api/gateways/gatewayId/certificate/certificateId

Where certificateId is the ID that you retrieved from the previous GET request.

If the certificate ID is a chain, multiple certificate objects are retrieved.

If the request is successful, the server returns HTTP response code 200 and the details for the specified certificate.

Example: Request and Response to Get Certificates

Request Header – Get the Certificate Configuration 

GET https://vchs.vmware.com/hybridity/api/gateways/gw-5/certificate/Certificate-0b51-3736-bed0-2a805a1ba7fd
Accept: application/json
Content-Type: application/json
X-Vcloud-Authorization: "d6eFLOqQYfuEn2MJTp7BQ2ISEO+ZYaEgTcqBy8wZQ6js="

Request body not required.

Response Body – Get the Certificate Configuration 

{
"certificates": [
    {
        "objectId": "Certificate-0b51-3736-bed0-2a805a1ba7fd",
        "objectTypeName": "Certificate",
        "vsmUuid": "42189888-BB1C-0C31-1CE4-62FE48217B1D",
        "nodeId": "524aad69-5f44-4bb8-8a2c-7786331de145",
        "revision": 1,
        "type": {
            "name": "Certificate"
        },
        "name": "vmware.com",
        "description": "",
        "scope": {
          "id": "0d9c4d16-1372-4d14-8429-807ecbbeeaa6",
          "objectTypeName": "Edge",
          "name": "Sample12-Gateway6.2.1"
          },
          "isUniversal": false,
          "universalRevision": 0,
          "subjectCn": "vmware.com",
          "issuerCn": "sample.vmware.com",
          "pemEncoding": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n",
          "certificateType": "certificate_signed",
          "x509Certificates": [ {
            "subjectCn": "vmware.com",
            "issuerCn": "sample.eng.vmware.com",
            "version": "3",
            "serialNumber": "6",
            "signatureAlgo": "SHA1WITHRSA",
            "signature": "8b fa 05 a0 88 5e c7 d7 93 09 6a 56 96 6b 78 1c ec 0b 00 7a 38 b4 fc bc a9 c6 f3 41 89 8d 3e fd b8 8f 43 cd 35 ad 70 3f 6f 33 89 7e ef e2 a9 3b 9d bb 1a 5a 04 c1 a5 18 4a 68 9b 62 66 33 fd 0a 31 7d c0 25 ec 19 f4 73 35 cc 7d 65 89 49 a0 fe cb ca d0 e9 e3 c1 dd 51 af 1f d8 65 39 5d 7c 55 01 51 d1 f1 85 d8 c1 5c f9 cd 94 89 a0 1f 3a f5 55 eb 80 86 89 63 c9 06 1a fc a9 2b 93 c1 40 96 ef 1e ef 7d d3 a3 a2 47 26 b0 02 43 33 ce fd 56 5d 9a 08 8b 68 2a 2b 0e e3 7a 58 96 56 fd e3 23 98 9d 0a 90 f6 83 30 1b 72 b2 5e 09 27 23 6a b1 92 c7 5c 28 79 c0 1d fe 55 b7 5e cb 60 96 47 e7 a0 15 ce 90 e4 3f 00 f6 e8 f0 16 a5 71 ad d2 d1 07 7e 67 c4 71 f2 66 63 8b 3d 01 45 6e 41 79 c2 26 15 95 7b ec 63 82 69 ce 81 ea 9d 85 8a da 6a 75 b5 5d 53 06 f1 94 4c 9b 81 2c 27 84 84 91 ce",
            "notBefore": "1454067174000",
            "notAfter": "1485603174000",
            "issuer": "1.2.840.113549.1.9.1=#1613616268616777617440766d776172652e636f6d,CN=sample.eng.vmware.com,OU=Engineering,O=VMware,L=Pune,ST=MH,C=IN",
            "subject": "CN=vmware.com,OU=Eng,O=vmware,L=PA,ST=CA,C=US",
            "publicKeyAlgo": "RSA",
            "publicKeyLength": "2048",
            "rsaPublicKeyModulus": "00 b9 43 b1 cf a5 86 39 a3 93 21 25 54 8f 7d f8 ed 73 7a 9e ac 57 cd 5b be 72 fe 8d 99 9c 22 d9 39 cd 8d 97 b0 35 f6 40 bb 4c d0 f0 80 5a 87 2c a5 90 50 1e 72 82 57 1e 21 17 c2 a4 23 94 ef b8 03 a2 6b 81 41 3c fa 05 95 cd 3a 6f 8c 3f 18 b6 3c 51 6f 61 55 3d 3b a5 eb fd d1 ba 30 93 2d 42 10 e0 12 6b 13 60 93 e2 51 bb 37 df c5 20 d6 fb 7a 9c e6 e7 68 8c 74 0f e4 50 9d ef 16 f4 13 ee f8 be 72 a9 8c 17 e6 a5 7d 31 93 30 06 8c e7 ca 46 9e 1b 43 eb 1e c1 5c 3b 3b fb a6 58 75 8b d4 f7 00 6c a0 3c cf 7b 45 59 2e f9 81 46 d1 48 15 d4 e6 b0 68 a1 67 32 e0 62 76 63 16 82 5c 06 29 93 4c 58 66 4c dd c9 3e ad ef 43 d8 ac 60 1f 44 49 e7 d0 97 a9 66 24 ea 87 e6 bb 34 d3 c7 50 87 4e e0 d9 8e d1 21 dd fe 95 a1 40 44 4f e6 4c b0 5b 91 30 c7 b8 4c ac 59 8c 2c 33 67 f7 86 6a 0f 0f",
            "rsaPublicKeyExponent": "10001",
            "sha1Hash": "a2:a5:a5:8e:c3:f0:11:61:93:60:dc:67:fd:f3:1c:67:3c:53:08:62",
            "md5Hash": "e7:f5:8c:d7:ec:2e:2b:c5:42:3f:a3:56:4d:20:5d:81",
            "isCa": false,
            "isValid": true,
            "valid": true,
            "ca": false
            }
          ] 
        }
    ]
}