add vmware-tools

2026-06-23 11:27:54 +08:00
parent 2a794fa8d3
commit 4f39d384e2
198 changed files with 14170 additions and 0 deletions
@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "machine-ssl"
+  - name: custom_openssl_config
+    value: false
@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key from custom OpenSSL configuration file"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "machine-ssl"
+  - name: custom_openssl_config
+    value: true
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed Certificate and Key"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "import_custom_ca_signed_machine_ssl_certificate"
@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Replace Machine SSL certificate with a custom CA-signed certificate"
+label: "Replace Machine SSL certificate with a custom CA-signed certificate"
+items:
+  - type: multiple
+    config: "config/manage_cert/machine_ssl/custom_ca_signed/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace Machine SSL certificate with a VMCA-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_machine_ssl_certificate_with_vmca_signed"
@@ -0,0 +1,17 @@
+type: menu
+description: "Manage Machine SSL certificate"
+title: "Select Machine SSL Certificate Replacement Method"
+label: "Machine SSL certificate"
+items:
+  - type: single
+    config: "config/manage_cert/machine_ssl/op_vmca-signed-cert.yaml"
+  - type: single
+    config: "config/manage_cert/machine_ssl/menu_custom-ca-signed-cert.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: true
+    hidden: true
+
+input:
+  text: "Select an option [Return to the previous menu]: "
@@ -0,0 +1,11 @@
+type: operation-group
+description: "Manage CA certificate in the SMS VECS Store"
+title:
+label: "SMS certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_sms_certificates"
@@ -0,0 +1,17 @@
+type: menu
+description: "Manage Solution User certificates"
+title: "Select Solution User Certificate Replacement Method"
+label: "Solution User certificates"
+items:
+  - type: single
+    config: "config/manage_cert/soluser/op_vmca-signed-cert.yaml"
+  - type: single
+    config: "config/manage_cert/soluser/menu_custom-ca-signed-cert.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: true
+    hidden: true
+
+input:
+  text: "Select an option [Return to the previous menu]: "
@@ -0,0 +1,20 @@
+type: menu
+description: 'Manage VMCA certificate'
+title: 'Select VMCA Certificate Replacement Method'
+label: 'VMCA certificate'
+items:
+  - type: single
+    config: 'config/manage_cert/vmca/op_replace-vmca-cert.yaml'
+  - type: single
+    config: 'config/manage_cert/vmca/op_replace-vmca-cert-and-reset-all.yaml'
+  - type: single
+    config: 'config/manage_cert/vmca/menu_custom-ca-signed-vmca-cert.yaml'
+  - type: navigation:return
+    label: 'Return to previous menu'
+    key: 'R'
+    default: true
+    hidden: true
+
+input:
+  text: 'Select an option [Return to the previous menu]: '
+  
@@ -0,0 +1,11 @@
+type: operation-group
+description: "Manage CA certificate in VECS"
+title:
+label: "CA certificates in VECS Directory"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_ca_certificates_in_vecs"
@@ -0,0 +1,11 @@
+type: operation-group
+description: "Manage CA certificate in VMware Directory"
+title:
+label: "CA certificates in VMware Directory"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_ca_certificates_in_vmdir"
@@ -0,0 +1,7 @@
+type: operation
+title: 'Clear Expired Certificates in BACKUP_STORE in VECS'
+label: 'Clear expired certificates in BACKUP_STORE in VECS'
+condition: 'HAS_BACKUP_STORE'
+entry_point:
+  module: operation.manage_certificate
+  method: manage_expired_backup_store
@@ -0,0 +1,7 @@
+type: operation
+title: 
+label: 'Clear Machine SSL CSR in VECS'
+condition: 'HAS_MACHINE_SSL_CSR'
+entry_point:
+  module: operation.manage_certificate
+  method: manage_machine_ssl_csr
@@ -0,0 +1,6 @@
+type: operation
+title: 'Clear TRUSTED_ROOT_CRLS store in VECS'
+label: 'Clear TRUSTED_ROOT_CRLS store in VECS'
+entry_point:
+  module: operation.manage_certificate
+  method: clear_trusted_root_crls
@@ -0,0 +1,11 @@
+type: operation-group
+description: "Manage Data Encipherment certificate"
+title:
+label: "Data Encipherment certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_data_encipherment_certificate"
@@ -0,0 +1,12 @@
+type: operation-group
+description: 'Manage LDAPS Identity Source certificates'
+title:
+label: 'LDAPS Identity Source certificates'
+condition: 'HAS_LDAPS_IDENTITY_SOURCE'
+operations:
+  - type: single
+    config: 'config/op_prevalidate_credential.yaml'
+  - type: single
+    entry_point:
+      module: 'operation.manage_certificate'
+      method: 'manage_ldaps_identity_source_certificates'
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "vCenter Extension thumbprints"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_vcenter_extension_thumbprints"
@@ -0,0 +1,12 @@
+type: operation-group
+description: 'Manage Smart Card CA certificates'
+title:
+label: 'Smart Card CA certificates'
+condition: 'CAC_CONFIGURED'
+operations:
+  - type: single
+    config: 'config/op_prevalidate_credential.yaml'
+  - type: single
+    entry_point:
+      module: 'operation.manage_certificate'
+      method: 'manage_smart_card_certificates'
@@ -0,0 +1,16 @@
+type: operation-group
+description: "Manage STS signing certificates"
+title:
+label: "STS signing certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    config: "config/view_cert/op_view_11-sts.yaml"
+  - type: single
+    entry_point:
+      module: "lib.menu"
+      method: "Menu.run_menu_from_config"
+    arguments:
+      - name: "config"
+        value: "config/manage_cert/sts_signing/menu_sts-signing-certs.yaml"
@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Manage SMS Certificates"
+label: 
+items:
+  - type: multiple
+    config: "config/manage_cert/sms/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title: "Replace SMS self-signed certificate"
+label: "Replace SMS self-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_sms_certificate_with_self_signed"
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace SPS-extension certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_sps_certificate_with_vmca_signed"
@@ -0,0 +1,10 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key"
+entry_point:
+  module: operation.reset_certificate
+  method: generate_csr_and_private_key_of_soluser
+arguments:
+  - name: custom_openssl_config
+    value: false
@@ -0,0 +1,10 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key from custom OpenSSL configuration file"
+entry_point:
+  module: operation.reset_certificate
+  method: generate_csr_and_private_key_of_soluser
+arguments:
+  - name: custom_openssl_config
+    value: true
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed Certificate and Key"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: operation.manage_certificate
+      method: manage_solution_user_certificate_with_custom_ca_signed
@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Replace Solution User certificates with CA-signed certificates (not recommended)"
+label: "Replace Solution User certificates with CA-signed certificates (not recommended)"
+items:
+  - type: multiple
+    config: "config/manage_cert/soluser/custom_ca_signed/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace Solution User certificate with a VMCA-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "manage_solution_user_certificate_with_vmca_signed"
@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "sso-sts"
+  - name: custom_openssl_config
+    value: false
@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key from custom OpenSSL configuration file"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "sso-sts"
+  - name: custom_openssl_config
+    value: true
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed Certificate and Key"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "import_custom_ca_signed_sts_signing_certificate"
@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Replace STS Signing certificate with a custom CA-signed certificate"
+label: "Replace STS Signing certificate with a custom CA-signed certificate"
+items:
+  - type: multiple
+    config: "config/manage_cert/sts_signing/custom_ca_signed/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True
@@ -0,0 +1,18 @@
+type: menu
+description: "Manage STS signing certificates"
+title: "Select STS Signing Certificate Replacement Method"
+label: "STS signing certificates"
+items:
+  - type: single
+    config: "config/manage_cert/sts_signing/op_vmca-signed-cert.yaml"
+  - type: single
+    config: "config/manage_cert/sts_signing/menu_custom-ca-signed-cert.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True
+
+input:
+  text: "Select an option [Return to the previous menu]: "
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace STS Signing certificate with a VMCA-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_sts_signing_certificate_with_vmca_signed"
@@ -0,0 +1,21 @@
+type: menu
+description: "Check SSL Trust Anchors"
+title: "Check SSL Trust Anchors"
+sub_title: "Additional output options:"
+label: "Check SSL Trust Anchors"
+run_once: True
+items:
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_none.yaml"
+    default: True
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_with_service_id.yaml"
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_with_ep_uri.yaml"
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_with_service_id_and_uri.yaml"
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_with_fingerprint.yaml"
+
+input:
+  text: "Please select additional information options [{CURRENT_MENU[__DEFAULT__]}]: "
@@ -0,0 +1,12 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "None"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+
@@ -0,0 +1,15 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "Show associated endpoint URIs"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+    arguments:
+      - name: "show_endpoint_uris"
+        value: true
+
@@ -0,0 +1,14 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "Show the SHA256 fingerprint of the certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+    arguments:
+      - name: "use_sha256_fingerprint"
+        value: true
@@ -0,0 +1,15 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "Show associated Service IDs"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+    arguments:
+      - name: "show_service_id"
+        value: true
+
@@ -0,0 +1,16 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "Show both associated Service IDs and endpoint URIs"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+    arguments:
+      - name: "show_service_id"
+        value: true
+      - name: "show_endpoint_uris"
+        value: true
@@ -0,0 +1,11 @@
+type: operation-group
+description: "Update SSL trust anchors"
+title:
+label: "Update SSL Trust Anchors"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_ssl_trust_anchors"
@@ -0,0 +1,14 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and private key"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "vmca"
+  - name: custom_openssl_config
+    value: false
+  - name: is_CA
+    value: true
@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and private key \n    from custom OpenSSL configuration file"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "vmca"
+  - name: custom_openssl_config
+    value: true
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed certificate and private key"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "import_custom_ca_signed_vmca_certificate"
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed certificate and private key \n    and regenerate all certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "import_custom_ca_signed_vmca_certificate_and_reset_all"
@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Replace VMCA certificate with a CA-signed certificate"
+label: "Replace VMCA certificate with a CA-signed certificate"
+items:
+  - type: multiple
+    config: "config/manage_cert/vmca/custom_ca_signed/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: true
+    hidden: true
+    use_label_as_key: True
@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace VMCA certificate with a self-signed certificate \n    and regenerate all certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "replace_vmca_cert_and_regenerate_all"
@@ -0,0 +1,12 @@
+type: operation-group
+description:
+title:
+label: "Replace VMCA certificate with a self-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "replace_vmca_cert"
+