SSL Support for the VIM Protocol

Web services use http transport which can also be transferred over SSL. The VIM protocol uses SSL by default, but it is possible to configure it without SSL usage.

Each server supporting the VIM protocol (vCenter server or ESX server) has its own SSL certificate. When connecting over SSL you should verify this certificate and accept it:

  • Import all certificates from the server into a truststore and verify upon each connection while rejecting those that are not present in the set of trusted certificates (this is the secure method).

  • Accept all certificates without verification (this is a less secure method).

Currently, DFM supports only one strategy (accept all certificates always).