vSphere WebClient PrivateKey

-6.Hi all,

I'm attempting to use the web client's keystore to extract an X509Certificate and PrivateKey to use with the SSO server. I've successfully been able to retrieve the vSphere 6 web client's private key from the KeystoreService when running locally, but this doesn't work when deployed on an actual vSphere Web Client server, since the PrivateKey is not present in the KeyStore returned by KeystoreService.

I think that this is because the v6 dev setup instructions use a script to extract the private key using vecs-cli, creating a keystore that differs from the one on the server.

Is there an OSGi-exposed service provided by VMware that allows me to retrieve the PrivateKey from vmafd/vecs? I see a class called VecsUtils  in  vlsiClient-6.0.0.jar that returns a KeyStore, but I can't get it to return anything but null. Any ideas?

Thanks