VMCA Name: FQDN of your VMCA (typically use FQDN of your vCSAĦ.Then, Certificate Manager will prompt to specify the following values: Enter SSO and VC administrator credentials (default: Then again, choose option 1 to Generate CSR and Keys for Machine SSL certificate.Ĥ. Choose option 1: Replace Machine SSL certificate with Custom Certificateģ. This will replace the expired certificate with the previous configuration and will make your vCenter functional, so that you may proceed with steps below later. You will see vSphere Certificate Manager with multiple options to select.Įngineer’s note : In case of an emergency, no accessibility to issue a certificate, or your previous certificate was VMware self-signed (typically certificate valid for 10 years): You may try to revert back by choosing option 7 of Certificate Manager. Run /usr/lib/vmware-vmca/bin/certificate-manager.Generate a certificate signing request (CSR)
With some minor changes, they also may be considered for any vCSA version from 6.0 to 6.7. How to recover a vCenter machine certificate to a fully functional stateīelow are the steps our Dasher engineers followed to recover VMware vCenter 6.5 to fully functional state. In this case, our client could not login vCenter, manage it and other third party integration plugins, or backup software failed with tasks. When a vCenter machine certificate expires, most communication and services will not work properly and fail to function (due to multiple services that are assigned to use that certificate for secure communication). This expired certificate was not self-signed or automatically created during new vCenter installation, but instead issued by a trusted certificate authority (CA).ĭasher’s expert engineers recommend replacing the certificate on your vCenter and checking the expiration date to prevent a vCenter outage. The platform became unavailable because the certificate expired. Recently, one of our clients experienced an issue with VMware vCenter 6.5. While VMware vCenter provides a centralized platform for managing across the hybrid cloud, an expired certificate can turn into an IT nightmare. How to avoid expired certificates Denis Kazakov, Solution Engineer
0 kommentar(er)
