Replacing all certificates with custom certificate

As previously discussed, if for specific reasons an external CA needs to be used in the environment, we would need to obtain the appropriate certificate and replace it across the components in the vSphere environment. In the following recipe, we replace the machine SSL certificate with the one obtained from the CA.

Getting ready

A prerequisite for replacing the certificate is to ensure that you have created the CSRs and sent it to the CA to obtain the signed certificates. You would require the following:

• A valid machine SSL custom certificate (*.crt file)
• A valid machine SSL custom key (*.key file)
• A valid signing certificate for the custom machine certificate

How to do it...

1. Log in to the vCSA. Key in the command shell when prompted to access the shell.
2. The vSphere Certificate Manager utility can be invoked by the /usr/lib/vmware-vmca/bin/certificate-manager command.

 

3. Choose option 1. Replace Machine SSL Certificates with Custom Certificate. Choose...