Generate Manually Key Pairs and Certificate Signing Requests for the Management Components in Region B

Create certificate signing requests for the management components in the SDDC and send them a certificate authority, such as the Microsoft AD server in Region B, for getting a signed component certificate.

• Generate Manually Key Pairs and Certificate Signing Requests for the ESXi Hosts in Region B If you plan to manually generate certificates for the ESXi management hosts in Region B, on the Management vCenter Server generate a key pair and Certificate Signing Request (CSR) for each hosts. Submit the CSR file to the certificate authority for signing.
• Generate Manually a Key Pair and Certificate Signing Request for the Platform Services Controller Instances in Region B Generate a single Certificate Signing Request (CSR) for the load-balanced Platform Services Controllers and submit it to the certificate authority for signing. The two Platform Services Controllers have the same certificate.
• Generate Manually Key Pair and Certificate Signing Request for vCenter Server in Region B If you plan to generate manually a CA-signed certificate for vCenter Server in Region B, you can generate a certificate signing request (CSR) and submit it to the CA for signing.
• Generate Manually Key Pair and Certificate Singing Request for NSX in Region B If you plan to generate manually a CA-signed certificate for NSX, you can generate a certificate signing request (CSR) and submit it to the CA for signing.
• Generate Manually a Key Pair and Certificate Signing Request for vSphere Data Protection in Region B Generate the files that are required to obtain a CA-signed certificate for vSphere Data Protection in Region B.
• Generate Key Pairs and Certificate Signing Requests for Site Recovery Manager Certificates Generate key pair and certificate signing requests (CSRs) that you can use to obtain a CA-signed certificate for the Site Recovery Manager instances in the SDDC.
• Generate Key Pairs and Certificate Signing Requests for vSphere Replication Generate key pair and certificate signing request (CSR) files that you can use to obtain CA-signed certificates for vSphere Replication.
• Generate a Key Pair and Certificate Signing Request for vRealize Log Insight in Region B To create a CA-signed certificate for vRealize Log Insight in Region B, generate a certificate signing request (CSR) on the Linux appliance for the master node and use the intermediate certificate authority on the child AD server to sign the certificate.

Parent topic: Region B Certificate Replacement