Regenerating a new VMCA Root Certificate and replacing all certificates

Typically a new deployment of vCSA incorporates a VMCA-signed certificate for all its components. In the event that this certificate needs to be replaced/regenerated, perhaps due to expiry, we will need to initiate the process described in this recipe. Here, we shall regenerate the VMCA Root Certificate, replace the local machine SSL certificate, and the local solution user certificates with VMCA-signed certificates.

Getting ready

All the steps in this recipe would be carried out from either an embedded deployment or on a Platform Services Controller (PSC). Ensure that you have the appropriate access credentials to the respective systems. In the following recipe, we will perform the steps from the vCenter Server Appliance with Embedded PSC.

How to do it...

 

1. Log in to the vCSA. Key in the command shell when prompted, to access the shell, as shown in the following console output :

2. The vSphere Certificate Manager utility can...