1. Download latest version:

curl -O https://dl.eff.org/certbot-auto

2. Mod script:

chmod +x certbot-auto 

3. Move location:

mv certbot-auto /usr/local/bin/certbot-auto

4. Generate SSL

/usr/local/bin/certbot-auto certonly --standalone -d example.com

5. New certificates will be generated and saved here:

/etc/letsencrypt/live/

1. Power off Virtual Machine to be cloned

2. Create a new directory within the datastore:

mkdir /vmfs/volumes/datastore/clone_name

3. Clone a vmdk to the new directory using vmkfstools:

vmkfstools -i /vmfs/volumes/datastore/sourcevm/name.vmdk /vmfs/volumes/datastore/clone_name/clone.vmdk

4. Create New Virtual Machine:

• New VM
• Custom
• Name e.g. CLONE-NAME
• Datastore
• Virtual Machine 8
• Guest OS e.g. Windows Server 2012 r2
• CPUs
• Memory
• Network
• SCSI Controller (LSI Logic SAS)
• Use an existing virtual disk (Browse and select clone .vmdk file from above)
• Virtual Device Node (SCSI 0:0)
• Finish

5. Power on Virtual Machine

6. Update hostname and IP address

curl ipinfo.io/ip

1. Open command prompt as Administrator

2. Upgrade the hashing algorithm to sha256:

certutil -setreg ca\csp\CNGHashAlgorithm SHA256

3. Renew the Certificate by going to MMC > Certification Authority (Local) Snap In. Right-click the CA and select Renew All Tasks > Renew CA Certificate. Select whether you want to keep the existing keys or create new ones

4. Check sha256 is now in place – Certificate Authority > Right click domain > Properties > View Certificate > Details

Credit goes to https://support.symantec.com/en_US/article.TECH246255.html

OpenSSH is unable to connect to a legacy algorithm. Run the following command to get round it:

ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 x.x.x.x