add vmware-tools

vCert-6.1.1-20260401/config/check_cert/op_check_00-reset_results.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title:
+label:
+entry_point:
+  module: operation.check_certificate
+  method: reset_certificate_status

vCert-6.1.1-20260401/config/check_cert/op_check_01-certificate_status.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: "Checking Certificate Status"
+label:
+entry_point:
+  module: operation.check_certificate
+  method: check_certificate_status

vCert-6.1.1-20260401/config/check_cert/op_check_02-sts_tenant_certs.yaml

@@ -0,0 +1,7 @@
+type: operation
+description: "Check machine SSL certificate"
+title: "Checking STS Signing Certs & Signing Chains"
+label:
+entry_point:
+  module: operation.check_certificate
+  method: check_sts_tenant_certificates

vCert-6.1.1-20260401/config/check_cert/op_check_03-ca_certs_in_vmdir.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: "Checking CA certificates in VMDir [by CN(id)]"
+label:
+entry_point:
+  module: operation.check_certificate
+  method: check_ca_certificates_in_vmdir

vCert-6.1.1-20260401/config/check_cert/op_check_04-ca_certs_in_vecs.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: "Checking CA certificates in VECS [by Alias]"
+label:
+entry_point:
+  module: operation.check_certificate
+  method: check_ca_certificates_in_vecs

vCert-6.1.1-20260401/config/check_cert/op_check_05-vecs_store_permissions.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: "Checking VECS Stores"
+label:
+entry_point:
+  module: operation.check_configuration
+  method: check_vecs_store_permissions

vCert-6.1.1-20260401/config/check_cert/op_check_06-service_principals.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: "Checking Service Principals"
+label:
+entry_point:
+  module: operation.check_certificate
+  method: check_service_principals

vCert-6.1.1-20260401/config/check_cert/op_check_07-crls.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: "Checking Certificate Revocation Lists"
+label:
+entry_point:
+  module: operation.check_certificate
+  method: check_crls

vCert-6.1.1-20260401/config/check_cert/op_check_08-identity-source.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title:
+label:
+entry_point:
+  module: operation.check_certificate
+  method: check_identity_source_certificates

vCert-6.1.1-20260401/config/check_cert/op_check_09-ssl_trust_anchors.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: "Checking SSL Trust Anchors"
+label:
+entry_point:
+  module: operation.check_certificate
+  method: check_ssl_trust_anchors

vCert-6.1.1-20260401/config/check_cert/op_check_10-vc_ext_thumbprints.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: "Checking vCenter Extension Thumbprints"
+label:
+entry_point:
+  module: operation.check_certificate
+  method: check_vcenter_extension_thumbprints

vCert-6.1.1-20260401/config/check_cert/op_check_11-vmca_vcdb.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: 'Checking VMCA Configurations in VCDB'
+label: 
+entry_point:
+  module: operation.check_configuration
+  method: check_vmca_configuration_vcdb

vCert-6.1.1-20260401/config/check_cert/op_check_12-sts_config.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: 
+label: 
+entry_point:
+  module: operation.check_configuration
+  method: check_sts_configuration

vCert-6.1.1-20260401/config/check_cert/op_check_99-show_check_result_summary.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title:
+label:
+entry_point:
+  module: operation.check_certificate
+  method: show_check_result_summary

vCert-6.1.1-20260401/config/check_config/op_check_01-ssl_interception.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: "Checking for SSL Interception"
+label: "Check for SSL Interception"
+entry_point:
+  module: operation.check_certificate
+  method: check_ssl_interception

vCert-6.1.1-20260401/config/check_config/op_check_02-sts.yaml

@@ -0,0 +1,9 @@
+type: operation-group
+description:
+title: 
+label: 'Check STS server certificate and configuration'
+operations:
+  - type: single
+    config: 'config/op_prevalidate_credential.yaml'
+  - type: single
+    config: 'config/check_config/sts_config/op_check_sts_config.yaml'

vCert-6.1.1-20260401/config/check_config/op_check_04-vecs_store_permissions.yaml

@@ -0,0 +1,10 @@
+type: operation
+description:
+title: "Checking VECS Stores"
+label: "Check VECS store status and permissions"
+entry_point:
+  module: operation.check_configuration
+  method: check_vecs_store_permissions
+arguments:
+  - name: check_only
+    value: false

vCert-6.1.1-20260401/config/check_config/ssl_interception/menu_manage_ssl_interception.yaml

@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "SSL Interception Certificate Management"
+label: "SSL Interception Certificate Management"
+items:
+  - type: multiple
+    config: "config/check_config/ssl_interception/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True

vCert-6.1.1-20260401/config/check_config/ssl_interception/op_01_download_certs_proxy.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Download and import CA certificates from the proxy"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "download_proxy_ca_certificates"

vCert-6.1.1-20260401/config/check_config/ssl_interception/op_02_provide_proxy_ca_certs.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA certificate(s) from a file"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "import_proxy_ca_certificates"

vCert-6.1.1-20260401/config/check_config/sts_config/op_check_sts_config.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+title: 
+label: 
+entry_point:
+  module: operation.manage_configuration
+  method: manage_sts_configuration

vCert-6.1.1-20260401/config/esxi_cert_actions/op_esxi_action_01-manage_cert.yaml

@@ -0,0 +1,7 @@
+type: operation
+description: "Manage ESXi Certificates"
+title: ""
+label: "Check ESXi/vCenter certificate trust"
+entry_point:
+  module: operation.esxi_certificate_operations
+  method: check_esxi_vcenter_trust

vCert-6.1.1-20260401/config/esxi_cert_actions/op_esxi_action_02-check_cert_against_vCenter_db.yaml

@@ -0,0 +1,7 @@
+type: operation
+description: "Check ESXi certificate against vCenter database"
+title: ""
+label: "Check ESXi certificate against vCenter database"
+entry_point:
+  module: operation.esxi_certificate_operations
+  method: check_esxi_certificate_against_vcdb

vCert-6.1.1-20260401/config/esxi_cert_actions/op_esxi_action_03-replace_cert.yaml

@@ -0,0 +1,7 @@
+type: operation
+description: "Replace ESXi certificate"
+title: ""
+label: "Replace ESXi certificate"
+entry_point:
+  module: operation.esxi_certificate_operations
+  method: replace_esxi_certificate

vCert-6.1.1-20260401/config/generate_report/op_genreport_01-default-report.yaml

@@ -0,0 +1,37 @@
+type: operation-group
+description:
+title:
+label:
+operations:
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: generate_report_ca_certs_in_vecs
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: generate_report_ca_certs_in_vmdir
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: generate_report_solution_user_certs_in_vmdir
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: generate_report_sts_tenant_certs
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: generate_report_ca_certs_sca
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: generate_report_ca_certs_ad_ldaps
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: generate_report_certs_in_filesystem
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: generate_report_ssl_trust_anchors

vCert-6.1.1-20260401/config/logging.yaml

@@ -0,0 +1,30 @@
+version: 1
+
+disable_existing_loggers: false
+
+formatters:
+  file_format:
+    format: '%(asctime)s - [%(name)s - %(funcName)s] - %(levelname)s - %(message)s'
+    datefmt: '%Y-%m-%dT%H:%M:%S'
+  console_format:
+    format: '%(asctime)s - %(levelname)s - %(message)s'
+    datefmt: '%Y-%m-%dT%H:%M:%S'
+
+handlers:
+  console:
+    class: logging.StreamHandler
+    level: CRITICAL
+    formatter: console_format
+    stream: ext://sys.stdout
+  file:
+    class: logging.handlers.RotatingFileHandler
+    level: DEBUG
+    formatter: file_format
+    filename: /var/log/vmware/vCert/vCert.log
+    # 20MB file size
+    maxBytes: 20000000
+    backupCount: 5
+
+root:
+  level: DEBUG
+  handlers: [console, file]

vCert-6.1.1-20260401/config/manage_cert/machine_ssl/custom_ca_signed/op_01_generate-csr.yaml

@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "machine-ssl"
+  - name: custom_openssl_config
+    value: false

vCert-6.1.1-20260401/config/manage_cert/machine_ssl/custom_ca_signed/op_02_generate-csr-openssl-config.yaml

@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key from custom OpenSSL configuration file"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "machine-ssl"
+  - name: custom_openssl_config
+    value: true

vCert-6.1.1-20260401/config/manage_cert/machine_ssl/custom_ca_signed/op_03_import-certificate.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed Certificate and Key"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "import_custom_ca_signed_machine_ssl_certificate"

vCert-6.1.1-20260401/config/manage_cert/machine_ssl/menu_custom-ca-signed-cert.yaml

@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Replace Machine SSL certificate with a custom CA-signed certificate"
+label: "Replace Machine SSL certificate with a custom CA-signed certificate"
+items:
+  - type: multiple
+    config: "config/manage_cert/machine_ssl/custom_ca_signed/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True

vCert-6.1.1-20260401/config/manage_cert/machine_ssl/op_vmca-signed-cert.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace Machine SSL certificate with a VMCA-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_machine_ssl_certificate_with_vmca_signed"

vCert-6.1.1-20260401/config/manage_cert/menu_machine_ssl_cert.yaml

@@ -0,0 +1,17 @@
+type: menu
+description: "Manage Machine SSL certificate"
+title: "Select Machine SSL Certificate Replacement Method"
+label: "Machine SSL certificate"
+items:
+  - type: single
+    config: "config/manage_cert/machine_ssl/op_vmca-signed-cert.yaml"
+  - type: single
+    config: "config/manage_cert/machine_ssl/menu_custom-ca-signed-cert.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: true
+    hidden: true
+
+input:
+  text: "Select an option [Return to the previous menu]: "

vCert-6.1.1-20260401/config/manage_cert/menu_sms_certs.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description: "Manage CA certificate in the SMS VECS Store"
+title:
+label: "SMS certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_sms_certificates"

vCert-6.1.1-20260401/config/manage_cert/menu_solution_user_cert.yaml

@@ -0,0 +1,17 @@
+type: menu
+description: "Manage Solution User certificates"
+title: "Select Solution User Certificate Replacement Method"
+label: "Solution User certificates"
+items:
+  - type: single
+    config: "config/manage_cert/soluser/op_vmca-signed-cert.yaml"
+  - type: single
+    config: "config/manage_cert/soluser/menu_custom-ca-signed-cert.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: true
+    hidden: true
+
+input:
+  text: "Select an option [Return to the previous menu]: "

vCert-6.1.1-20260401/config/manage_cert/menu_vmca_cert.yaml

@@ -0,0 +1,20 @@
+type: menu
+description: 'Manage VMCA certificate'
+title: 'Select VMCA Certificate Replacement Method'
+label: 'VMCA certificate'
+items:
+  - type: single
+    config: 'config/manage_cert/vmca/op_replace-vmca-cert.yaml'
+  - type: single
+    config: 'config/manage_cert/vmca/op_replace-vmca-cert-and-reset-all.yaml'
+  - type: single
+    config: 'config/manage_cert/vmca/menu_custom-ca-signed-vmca-cert.yaml'
+  - type: navigation:return
+    label: 'Return to previous menu'
+    key: 'R'
+    default: true
+    hidden: true
+
+input:
+  text: 'Select an option [Return to the previous menu]: '
+  

vCert-6.1.1-20260401/config/manage_cert/op_ca_certs_in_vecs.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description: "Manage CA certificate in VECS"
+title:
+label: "CA certificates in VECS Directory"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_ca_certificates_in_vecs"

vCert-6.1.1-20260401/config/manage_cert/op_ca_certs_in_vmdir.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description: "Manage CA certificate in VMware Directory"
+title:
+label: "CA certificates in VMware Directory"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_ca_certificates_in_vmdir"

vCert-6.1.1-20260401/config/manage_cert/op_clear_expired_backup_store.yaml

@@ -0,0 +1,7 @@
+type: operation
+title: 'Clear Expired Certificates in BACKUP_STORE in VECS'
+label: 'Clear expired certificates in BACKUP_STORE in VECS'
+condition: 'HAS_BACKUP_STORE'
+entry_point:
+  module: operation.manage_certificate
+  method: manage_expired_backup_store

vCert-6.1.1-20260401/config/manage_cert/op_clear_machine_ssl_csr.yaml

@@ -0,0 +1,7 @@
+type: operation
+title: 
+label: 'Clear Machine SSL CSR in VECS'
+condition: 'HAS_MACHINE_SSL_CSR'
+entry_point:
+  module: operation.manage_certificate
+  method: manage_machine_ssl_csr

vCert-6.1.1-20260401/config/manage_cert/op_clear_trusted_root_crls.yaml

@@ -0,0 +1,6 @@
+type: operation
+title: 'Clear TRUSTED_ROOT_CRLS store in VECS'
+label: 'Clear TRUSTED_ROOT_CRLS store in VECS'
+entry_point:
+  module: operation.manage_certificate
+  method: clear_trusted_root_crls

vCert-6.1.1-20260401/config/manage_cert/op_data-encipherment.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description: "Manage Data Encipherment certificate"
+title:
+label: "Data Encipherment certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_data_encipherment_certificate"

vCert-6.1.1-20260401/config/manage_cert/op_ldaps_identity_source.yaml

@@ -0,0 +1,12 @@
+type: operation-group
+description: 'Manage LDAPS Identity Source certificates'
+title:
+label: 'LDAPS Identity Source certificates'
+condition: 'HAS_LDAPS_IDENTITY_SOURCE'
+operations:
+  - type: single
+    config: 'config/op_prevalidate_credential.yaml'
+  - type: single
+    entry_point:
+      module: 'operation.manage_certificate'
+      method: 'manage_ldaps_identity_source_certificates'

vCert-6.1.1-20260401/config/manage_cert/op_manage-vc-ext-thumbprints.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "vCenter Extension thumbprints"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_vcenter_extension_thumbprints"

vCert-6.1.1-20260401/config/manage_cert/op_smart_card.yaml

@@ -0,0 +1,12 @@
+type: operation-group
+description: 'Manage Smart Card CA certificates'
+title:
+label: 'Smart Card CA certificates'
+condition: 'CAC_CONFIGURED'
+operations:
+  - type: single
+    config: 'config/op_prevalidate_credential.yaml'
+  - type: single
+    entry_point:
+      module: 'operation.manage_certificate'
+      method: 'manage_smart_card_certificates'

vCert-6.1.1-20260401/config/manage_cert/op_sts_signing_certs.yaml

@@ -0,0 +1,16 @@
+type: operation-group
+description: "Manage STS signing certificates"
+title:
+label: "STS signing certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    config: "config/view_cert/op_view_11-sts.yaml"
+  - type: single
+    entry_point:
+      module: "lib.menu"
+      method: "Menu.run_menu_from_config"
+    arguments:
+      - name: "config"
+        value: "config/manage_cert/sts_signing/menu_sts-signing-certs.yaml"

vCert-6.1.1-20260401/config/manage_cert/sms/menu_manage_sms.yaml

@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Manage SMS Certificates"
+label: 
+items:
+  - type: multiple
+    config: "config/manage_cert/sms/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True

vCert-6.1.1-20260401/config/manage_cert/sms/op_01-renew_sms_self_signed.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title: "Replace SMS self-signed certificate"
+label: "Replace SMS self-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_sms_certificate_with_self_signed"

vCert-6.1.1-20260401/config/manage_cert/sms/op_02-renew_sps_vmca_signed.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace SPS-extension certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_sps_certificate_with_vmca_signed"

vCert-6.1.1-20260401/config/manage_cert/soluser/custom_ca_signed/op_01_generate-csr.yaml

@@ -0,0 +1,10 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key"
+entry_point:
+  module: operation.reset_certificate
+  method: generate_csr_and_private_key_of_soluser
+arguments:
+  - name: custom_openssl_config
+    value: false

vCert-6.1.1-20260401/config/manage_cert/soluser/custom_ca_signed/op_02_generate-csr-openssl-config.yaml

@@ -0,0 +1,10 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key from custom OpenSSL configuration file"
+entry_point:
+  module: operation.reset_certificate
+  method: generate_csr_and_private_key_of_soluser
+arguments:
+  - name: custom_openssl_config
+    value: true

vCert-6.1.1-20260401/config/manage_cert/soluser/custom_ca_signed/op_03_import-certificate.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed Certificate and Key"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: operation.manage_certificate
+      method: manage_solution_user_certificate_with_custom_ca_signed

vCert-6.1.1-20260401/config/manage_cert/soluser/menu_custom-ca-signed-cert.yaml

@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Replace Solution User certificates with CA-signed certificates (not recommended)"
+label: "Replace Solution User certificates with CA-signed certificates (not recommended)"
+items:
+  - type: multiple
+    config: "config/manage_cert/soluser/custom_ca_signed/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True

vCert-6.1.1-20260401/config/manage_cert/soluser/op_vmca-signed-cert.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace Solution User certificate with a VMCA-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "manage_solution_user_certificate_with_vmca_signed"

vCert-6.1.1-20260401/config/manage_cert/sts_signing/custom_ca_signed/op_01_generate-csr.yaml

@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "sso-sts"
+  - name: custom_openssl_config
+    value: false

vCert-6.1.1-20260401/config/manage_cert/sts_signing/custom_ca_signed/op_02_generate-csr-openssl-config.yaml

@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and Private Key from custom OpenSSL configuration file"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "sso-sts"
+  - name: custom_openssl_config
+    value: true

vCert-6.1.1-20260401/config/manage_cert/sts_signing/custom_ca_signed/op_03_import-certificate.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed Certificate and Key"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "import_custom_ca_signed_sts_signing_certificate"

vCert-6.1.1-20260401/config/manage_cert/sts_signing/menu_custom-ca-signed-cert.yaml

@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Replace STS Signing certificate with a custom CA-signed certificate"
+label: "Replace STS Signing certificate with a custom CA-signed certificate"
+items:
+  - type: multiple
+    config: "config/manage_cert/sts_signing/custom_ca_signed/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True

vCert-6.1.1-20260401/config/manage_cert/sts_signing/menu_sts-signing-certs.yaml

@@ -0,0 +1,18 @@
+type: menu
+description: "Manage STS signing certificates"
+title: "Select STS Signing Certificate Replacement Method"
+label: "STS signing certificates"
+items:
+  - type: single
+    config: "config/manage_cert/sts_signing/op_vmca-signed-cert.yaml"
+  - type: single
+    config: "config/manage_cert/sts_signing/menu_custom-ca-signed-cert.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: True
+    hidden: True
+    use_label_as_key: True
+
+input:
+  text: "Select an option [Return to the previous menu]: "

vCert-6.1.1-20260401/config/manage_cert/sts_signing/op_vmca-signed-cert.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace STS Signing certificate with a VMCA-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_sts_signing_certificate_with_vmca_signed"

vCert-6.1.1-20260401/config/manage_cert/trust_anchors/menu_check_trust_anchors.yaml

@@ -0,0 +1,21 @@
+type: menu
+description: "Check SSL Trust Anchors"
+title: "Check SSL Trust Anchors"
+sub_title: "Additional output options:"
+label: "Check SSL Trust Anchors"
+run_once: True
+items:
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_none.yaml"
+    default: True
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_with_service_id.yaml"
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_with_ep_uri.yaml"
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_with_service_id_and_uri.yaml"
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_check_with_fingerprint.yaml"
+
+input:
+  text: "Please select additional information options [{CURRENT_MENU[__DEFAULT__]}]: "

vCert-6.1.1-20260401/config/manage_cert/trust_anchors/op_check_none.yaml

@@ -0,0 +1,12 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "None"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+

vCert-6.1.1-20260401/config/manage_cert/trust_anchors/op_check_with_ep_uri.yaml

@@ -0,0 +1,15 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "Show associated endpoint URIs"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+    arguments:
+      - name: "show_endpoint_uris"
+        value: true
+

vCert-6.1.1-20260401/config/manage_cert/trust_anchors/op_check_with_fingerprint.yaml

@@ -0,0 +1,14 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "Show the SHA256 fingerprint of the certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+    arguments:
+      - name: "use_sha256_fingerprint"
+        value: true

vCert-6.1.1-20260401/config/manage_cert/trust_anchors/op_check_with_service_id.yaml

@@ -0,0 +1,15 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "Show associated Service IDs"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+    arguments:
+      - name: "show_service_id"
+        value: true
+

vCert-6.1.1-20260401/config/manage_cert/trust_anchors/op_check_with_service_id_and_uri.yaml

@@ -0,0 +1,16 @@
+type: operation-group
+description: "Check SSL trust anchors"
+title:
+label: "Show both associated Service IDs and endpoint URIs"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "check_ssl_trust_anchors"
+    arguments:
+      - name: "show_service_id"
+        value: true
+      - name: "show_endpoint_uris"
+        value: true

vCert-6.1.1-20260401/config/manage_cert/trust_anchors/op_update_trust_anchors.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description: "Update SSL trust anchors"
+title:
+label: "Update SSL Trust Anchors"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.manage_certificate"
+      method: "manage_ssl_trust_anchors"

vCert-6.1.1-20260401/config/manage_cert/vmca/custom_ca_signed/op_01_generate-csr.yaml

@@ -0,0 +1,14 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and private key"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "vmca"
+  - name: custom_openssl_config
+    value: false
+  - name: is_CA
+    value: true

vCert-6.1.1-20260401/config/manage_cert/vmca/custom_ca_signed/op_02_generate-csr-openssl-config.yaml

@@ -0,0 +1,12 @@
+type: operation
+description:
+title:
+label: "Generate Certificate Signing Request and private key \n    from custom OpenSSL configuration file"
+entry_point:
+  module: operation.manage_certificate
+  method: generate_csr_and_private_key
+arguments:
+  - name: cert_usage
+    value: "vmca"
+  - name: custom_openssl_config
+    value: true

vCert-6.1.1-20260401/config/manage_cert/vmca/custom_ca_signed/op_03_import-certificate.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed certificate and private key"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "import_custom_ca_signed_vmca_certificate"

vCert-6.1.1-20260401/config/manage_cert/vmca/custom_ca_signed/op_04_import-certificate-and-reset-all-certs.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Import CA-signed certificate and private key \n    and regenerate all certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "import_custom_ca_signed_vmca_certificate_and_reset_all"

vCert-6.1.1-20260401/config/manage_cert/vmca/menu_custom-ca-signed-vmca-cert.yaml

@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Replace VMCA certificate with a CA-signed certificate"
+label: "Replace VMCA certificate with a CA-signed certificate"
+items:
+  - type: multiple
+    config: "config/manage_cert/vmca/custom_ca_signed/op_*.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: true
+    hidden: true
+    use_label_as_key: True

vCert-6.1.1-20260401/config/manage_cert/vmca/op_replace-vmca-cert-and-reset-all.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+title:
+label: "Replace VMCA certificate with a self-signed certificate \n    and regenerate all certificates"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "replace_vmca_cert_and_regenerate_all"

vCert-6.1.1-20260401/config/manage_cert/vmca/op_replace-vmca-cert.yaml

@@ -0,0 +1,12 @@
+type: operation-group
+description:
+title:
+label: "Replace VMCA certificate with a self-signed certificate"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "replace_vmca_cert"
+    

vCert-6.1.1-20260401/config/menu_check_cert_status.yaml

@@ -0,0 +1,8 @@
+type: operation-group
+description: "Operation for checking certificates status"
+title: "Check current certificates status"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: multiple
+    config: "config/check_cert/op_*.yaml"

vCert-6.1.1-20260401/config/menu_check_config.yaml

@@ -0,0 +1,13 @@
+type: menu
+description: "Check configuration"
+title: "Configuration Check Menu"
+label: "Check configurations"
+items:
+  - type: multiple
+    config: "config/check_config/*.yaml"
+  - type: navigation:return
+    label: "Return to main menu"
+    key: "R"
+    default: True
+    use_label_as_key: True
+    hidden: True

vCert-6.1.1-20260401/config/menu_esxi_cert.yaml

@@ -0,0 +1,13 @@
+type: menu
+description:
+title: "Manage ESXi Certificates"
+label: "ESXi certificate operations"
+items:
+  - type: multiple
+    config: "config/esxi_cert_actions/op_esxi_action*.yaml"
+  - type: navigation:return
+    label: "Return to main menu"
+    key: "R"
+    default: True
+    hidden: true
+    use_label_as_key: True

vCert-6.1.1-20260401/config/menu_main.yaml

@@ -0,0 +1,28 @@
+type: menu
+description: "vCert main menu"
+title: "{VCERT_DESC}"
+items:
+  - type: single
+    config: "config/op_check_cert.yaml"
+    default: True
+  - type: single
+    config: "config/menu_view_cert.yaml"
+  - type: single
+    config: "config/menu_manage_cert.yaml"
+  - type: single
+    config: "config/menu_manage_trust_anchors.yaml"
+  - type: single
+    config: "config/menu_check_config.yaml"
+  - type: single
+    config: "config/op_reset_cert_vmca.yaml"
+  - type: single
+    config: "config/menu_esxi_cert.yaml"
+  - type: single
+    config: "config/menu_restart_service.yaml"
+  - type: single
+    config: "config/op_generate_report.yaml"
+  - type: navigation:exit
+    label: "Exit"
+    key: "E"
+input:
+  text: "Select an option [{CURRENT_MENU[__DEFAULT__]}]: "

vCert-6.1.1-20260401/config/menu_manage_cert.yaml

@@ -0,0 +1,39 @@
+type: menu
+description: 'Manage certificate'
+title: 'Manage vCenter Certificates'
+label: 'Manage certificates'
+items:
+  - type: single
+    config: 'config/manage_cert/menu_machine_ssl_cert.yaml'
+  - type: single
+    config: 'config/manage_cert/menu_solution_user_cert.yaml'
+  - type: single
+    config: 'config/manage_cert/op_ca_certs_in_vmdir.yaml'
+  - type: single
+    config: 'config/manage_cert/op_ca_certs_in_vecs.yaml'
+  - type: single
+    config: 'config/manage_cert/menu_sms_certs.yaml'
+  - type: single
+    config: 'config/manage_cert/op_data-encipherment.yaml'
+  - type: single
+    config: 'config/manage_cert/op_manage-vc-ext-thumbprints.yaml'
+  - type: single
+    config: 'config/manage_cert/op_sts_signing_certs.yaml'
+  - type: single
+    config: 'config/manage_cert/menu_vmca_cert.yaml'
+  - type: single
+    config: 'config/manage_cert/op_smart_card.yaml'
+  - type: single
+    config: 'config/manage_cert/op_ldaps_identity_source.yaml'
+  - type: single
+    config: 'config/manage_cert/op_clear_expired_backup_store.yaml'
+  - type: single
+    config: 'config/manage_cert/op_clear_trusted_root_crls.yaml'
+  - type: single
+    config: 'config/manage_cert/op_clear_machine_ssl_csr.yaml'
+  - type: navigation:return
+    label: 'Return to main menu'
+    key: 'R'
+    default: True
+    use_label_as_key: True
+    hidden: True

vCert-6.1.1-20260401/config/menu_manage_trust_anchors.yaml

@@ -0,0 +1,17 @@
+type: menu
+description: "Manage SSL Trust Anchors"
+title: "Manage SSL Trust Anchors"
+label: "Manage SSL trust anchors"
+items:
+  - type: single
+    config: "config/manage_cert/trust_anchors/menu_check_trust_anchors.yaml"
+  - type: single
+    config: "config/manage_cert/trust_anchors/op_update_trust_anchors.yaml"
+  - type: navigation:return
+    label: "Return to previous menu"
+    key: "R"
+    default: true
+    hidden: true
+
+input:
+  text: "Select an option [Return to the previous menu]: "

vCert-6.1.1-20260401/config/menu_restart_service.yaml

@@ -0,0 +1,13 @@
+type: menu
+description: "Operation for restarting services"
+title: "Restart VMware Services"
+label: "Restart services"
+items:
+  - type: multiple
+    config: "config/restart_service/op_restart_*.yaml"
+  - type: navigation:return
+    label: "Return to main menu"
+    key: "R"
+    default: True
+    use_label_as_key: True
+    hidden: True

vCert-6.1.1-20260401/config/menu_view_cert.yaml

@@ -0,0 +1,13 @@
+type: menu
+description: "View certificate info"
+title: "View vCenter Certificates"
+label: "View certificate info"
+items:
+  - type: multiple
+    config: "config/view_cert/op_view_*.yaml"
+  - type: navigation:return
+    label: "Return to main menu"
+    key: "R"
+    default: True
+    use_label_as_key: True
+    hidden: True

vCert-6.1.1-20260401/config/op_check_cert.yaml

@@ -0,0 +1,9 @@
+type: operation-group
+description:
+label: "Check current certificate status"
+title:
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: multiple
+    config: "config/check_cert/op_*.yaml"

vCert-6.1.1-20260401/config/op_check_machine_ssl.yaml

@@ -0,0 +1,6 @@
+type: operation
+title:
+label: Check Machine SSL certificate
+entry_point:
+  module: operation.checks_certificates
+  method: check_machine_ssl_certificate

vCert-6.1.1-20260401/config/op_generate_report.yaml

@@ -0,0 +1,17 @@
+type: operation-group
+description:
+title:
+label: "Generate certificate report"
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: generate_header
+  - type: multiple
+    config: config/generate_report/op_*.yaml
+  - type: single
+    entry_point:
+      module: operation.generate_report
+      method: finalize_report

vCert-6.1.1-20260401/config/op_prevalidate_credential.yaml

@@ -0,0 +1,7 @@
+type: operation
+description:
+label:
+title:
+entry_point:
+  module: "operation.common"
+  method: "prevalidate_credential"

vCert-6.1.1-20260401/config/op_reset_cert_vmca.yaml

@@ -0,0 +1,11 @@
+type: operation-group
+description:
+label: "Reset all certificates with VMCA-signed certificates"
+title:
+operations:
+  - type: single
+    config: "config/op_prevalidate_credential.yaml"
+  - type: single
+    entry_point:
+      module: "operation.reset_certificate"
+      method: "reset_all_certificates"

vCert-6.1.1-20260401/config/restart_service/op_restart_01-restart_all_vm_services.yaml

@@ -0,0 +1,7 @@
+type: operation
+description: "Restart all VMware services"
+title:
+label: "Restart all VMware services"
+entry_point:
+  module: operation.restart_service
+  method: restart_vmware_services

vCert-6.1.1-20260401/config/restart_service/op_restart_02-restart_specific_services.yaml

@@ -0,0 +1,7 @@
+type: operation
+description: "Restart specific VMware service"
+title:
+label: "Restart specific VMware service"
+entry_point:
+  module: operation.restart_service
+  method: restart_specific_vmware_service

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.0-15952599.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.0-16189207.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.0-16386335.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.0-16620013.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.0-16749670.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.1-16858589.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.1-17005016.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.1-17327586.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.1-17491160.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.2-17694817.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vsan-health", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}

vCert-6.1.1-20260401/config/vecs_permissions/vcsa-7.0.2-17920168.json

@@ -0,0 +1 @@
+{"MACHINE_SSL_CERT": {"owner": "root", "read": ["vsm", "vlcm", "updatemgr", "vsphere-ui", "vpxd", "vpostgres"], "write": []}, "TRUSTED_ROOTS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "TRUSTED_ROOT_CRLS": {"owner": "root", "read": ["vpxd", "EVERYONE"], "write": []}, "machine": {"owner": "root", "read": ["vsan-health", "vpxd"], "write": []}, "vsphere-webclient": {"owner": "root", "read": ["perfcharts", "vsphere-ui", "vpxd", "vapiEndpoint"], "write": []}, "vpxd": {"owner": "root", "read": ["vpxd"], "write": []}, "vpxd-extension": {"owner": "root", "read": ["imagebuilder", "content-library", "vstatsuser", "deploy", "vsm", "vsan-health", "vlcm", "updatemgr", "eam", "vsphere-ui", "vpxd"], "write": []}, "SMS": {"owner": "root", "read": ["deploy", "vpxd"], "write": []}, "APPLMGMT_PASSWORD": {"owner": "root", "read": [], "write": []}, "data-encipherment": {"owner": "root", "read": ["vpxd"], "write": []}, "hvc": {"owner": "root", "read": ["vpxd"], "write": []}, "wcp": {"owner": "root", "read": ["content-library"], "write": []}}