vCenter Single Sign-On signs the tokens from its Security Token Service with this certificate. VMCA issues one valid for ten years and renews it by itself, but a certificate supplied by you or a third party is not renewed automatically and is the administrator's job.
Read more: Broadcom TechDocs
In the Ultra Transcenders books
Each book explains STS signing certificate in context, with comparison tables and the common traps.
Terms in this definition
- vCenter Single Sign-On
Handles vCenter authentication by issuing tokens to people and solutions, keeping a local domain (normally vsphere.local) and connecting to outside identity providers.
- STS
Inside vCenter SSO, this service signs SAML tokens with its own certificate and gives them to users and solution users once authenticated, so a single login covers every vCenter service.
- Certificate
Key Vault object holding an X.509 certificate, whose associated key and secret are managed alongside it.
- VMCA
vCenter's built-in certificate authority, which issues certificates to ESX hosts and vCenter services. VCF Operations can renew certificates it has signed automatically.
- Job
A sequence of steps executed together on one agent or runner, or on the server for agentless work. While running, each occupies one of your parallel jobs.