Use the Certificate Generation Utility to Generate Certificates Automatically in Region B

You can use the VMware Validated Design Certificate Generation Utility (CertGenVVD) to generate signed certificates that you can import to the SDDC management products in Region B. You can then import the certificates to these components to maintain secure connection to the external network and between the components themselves.

1. Use the Certificate Generation Utility to Generate CA-Signed Certificates for the SDDC Management Components in Region B Use the VMware Validated Design Certificate Generation Utility (CertGenVVD) to generate certificates that are signed by the Microsoft certificate authority (MSCA) for all management product with a single operation.
2. Additional Configuration for Intermediate Certificate Authority in Region B If you use an intermediate certificate authority on lax01.rainpole.local as certificate signer, CertGenVVD utility only retrieves the intermediate Base 64 certificate from the Microsoft CA. You must create a certificate chain file that also includes the root CA certificate.

Parent topic: Region B Certificate Replacement