vCenter Server 7.0 fails to start after replacing VMCA certificates with CA-signed certificates.

vCenter Server 7.0 fails to start after replacing VMCA certificates with CA-signed certificates.
When attempting to replace the Machine SSL certificate for vCenter with a custom CA-signed certificate, vCenter Server service fails to start.
In /var/log/vmware/rhttpproxy/rhttpproxy.log, you see a log message similar to:
2020-09-25T21:15:28.865Z warning rhttpproxy[07720] [Originator@6876 sub=RhttpProxy] [Rhttpproxy clusters REST PUT Handler] Saving proxy configuration failed! Error code = 13, Message = Error adding/updating listener edge_https_v6: Failed to load certificate chain from
Loading the certificate with OpenSSL returns the following error:
Command: openssl x509 -text -noout -in .crt
Output: unable to load certificate

https://kb.vmware.com/s/article/82168

Отключения 2021 года - ssl2/3, tls 1, smb2, Ldap и все все

Если кто-то забыл, то:
SMB1 - отключен давно
SMB2 -
This article describes information about Windows disabling guest access in SMB2 by default, and provides settings to enable insecure guest logons in Group Policy. However, this is generally not recommended.
https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/guest-access-in-smb2-is-disabled-by-default

TLS1.0 and TLS 1.1 S
Since November 1st Microsoft has changed the TLS to 1.2 for all environments. Exchange 2019 has even no opportunity to change back to the old standard. That means Exchange 2019 supports TLS 1.2 only.
https://www.msb365.blog/?p=2599#:~:text=TLS%20support,2019%20supports%20TLS%201.2%20only.
https://tkolber.medium.com/exchange-2019-free-busy-issue-with-exchange-2013-2016-ca902ca543a8

Final Notice for disabling of TLS1.0 and TLS 1.1 Support for Exchange Online Mail Flow
MC229914 · Published Dec 14, 2020 Message Summary
https://fromreallife.wordpress.com/2021/01/12/про-коварный-microsoft/

LDAP Channel Binding and LDAP Signing Requirements 2020
https://fromreallife.wordpress.com/2019/12/27/ldap-channel-binding-and-ldap-signing-requirements-2020/

Using OCSP, LDAP & HTTP for Certificate Checking
https://www.isode.com/whitepapers/ocsp-ldap-http-certificate-checking.html

vCenter Performance Deep Dive

vCenter Performance Deep Dive
https://youtu.be/aLtJ_sC0FSU

Evolving the VMware vSphere Security Configuration Guides

Evolving the VMware vSphere Security Configuration Guides
New Releases of Security Configuration Guides
https://blogs.vmware.com/vsphere/2021/02/evolving-the-vmware-vsphere-security-configuration-guides.html