Replace Certificates of the Management Products in Region A
After you generate a certificate for a management product in Region A that is signed by the two-layered certificate authority on the child AD server in the region, replace the default certificate or an expired certificate with newly-signed one on the product instance in the region.
Before you begin
Generate a certificate for the products in this validated design in one of the following ways:
Use the VMware Validated Design Certificate Utility. See Use the Certificate Generation Utility to Generate Certificates Automatically in Region A.
Generate Certificate Signing Requests manually and use them to have the product certificates signed by the certificate authority on the child AD server in Region A. See Generate Manually Key Pairs and Certificate Signing Requests for the Management Components in Region A and Generate CA-Signed Certificates for the SDDC Management Components in Region A.
Replace Certificates of the Virtual Infrastructure Components in Region A In this design, you replace user-facing certificates in Region A with certificates that are signed by a Microsoft Certificate Authority (CA). If the CA-signed certificates of the management components expire after you deploy the SDDC, you must replace them individually on each affected component.
- Replace Certificates of the Cloud Management Platform Components in Region A After you generate a signed certificate for a component of the Cloud Management Platform, replace it and update it on the management components in the region to maintain secure connection.
- Replace Certificates of the Operations Management Components in Region A If the certificate of vRealize Operations Manager or vRealize Log Insight expires, replace it and update it on the management components in the region to maintain secure connection.
Parent topic: Region A Certificate Replacement