Update Planner 属于 vCenter 证书自动化工具的一部分,可帮助您确定证书替换的正确顺序。请按照此工具建议的顺序执行各步骤以获得最佳结果。

过程

  1. 登录安装了 vCenter 证书自动化工具的计算机。
  2. 从命令行导航到此工具解压到的位置并运行以下命令。

    ssl-updater.bat

  3. 出现提示时,选择 1. Plan your steps to update SSL certificates
  4. 输入与要更新的服务对应的编号。
    • 要更新多个 SSL 证书,请用逗号分隔各编号。例如,要更新 vCenter Single Sign-On、vCenter Server 和 vSphere Web Client 上的 SSL 证书,请键入 1,3,4

    • 要更新此工具支持的所有服务上的证书,请键入 8。

    vSphere Web Client 和 vCenter 日志浏览器始终在同一台计算机上运行。

    注:

    输入要更新的所有服务。如果您最初将某些服务排除在外并稍后重新运行 Update Planner,这些步骤可能不正确并且更新可能会失败。

    Update Planner 显示要执行的任务以及执行顺序。

  5. 将 Update Planner 输出保存到文本文件中。

    所有证书都将被替换的环境的示例输出如下所示。

    1. Go to the machine with Single Sign-On installed and 
    - Update the Single Sign-On SSL certificate.
    
    2. Go to the machine with Inventory Service installed and 
    - Update Inventory Service trust to Single Sign-On.
    
    3. Go to the machine with Inventory Service installed and 
    - Update the Inventory Service SSL certificate.
    
    4. Go to the machine with vCenter Server installed and 
    - Update vCenter Server trust to Single Sign-On.
    
    5. Go to the machine with vCenter Server installed and 
    - Update the vCenter Server SSL certificate.
    
    6. Go to the machine with vCenter Server installed and 
    - Update vCenter Server trust to Inventory Service.
    
    7. Go to the machine with Inventory Service installed and 
    - Update the Inventory Service trust to vCenter Server.
    
    8. Go to the machine with vCenter Orchestrator installed and 
    - Update vCenter Orchestrator trust to Single Sign-On.
    
    9. Go to the machine with vCenter Orchestrator installed and 
    - Update vCenter Orchestrator trust to vCenter Server.
    
    10. Go to the machine with vCenter Orchestrator installed and 
    - Update the vCenter Orchestrator SSL certificate.
    
    11. Go to the machine with vSphere Web Client installed and 
    - Update vSphere Web Client trust to Single Sign-On.
    
    12. Go to the machine with vSphere Web Client installed and 
    - Update vSphere Web Client trust to Inventory Service.
    
    13. Go to the machine with vSphere Web Client installed and 
    - Update vSphere Web Client trust to vCenter Server.
    
    14. Go to the machine with vSphere Web Client installed and 
    - Update the vSphere Web Client SSL certificate.
    
    15. Go to the machine with Log Browser installed and 
    - Update the Log Browser trust to Single Sign-On.
    
    16. Go to the machine with Log Browser installed and 
    - Update the Log Browser SSL certificate.
    
    17. Go to the machine with vSphere Update Manager installed and 
    - Update the vSphere Update Manager SSL certificate.
    
    18. Go to the machine with vSphere Update Manager installed and 
    - Update vSphere Update Manager trust to vCenter Server.
  6. 键入 9 返回主菜单。

下一步做什么

更新证书和信任。请参见运行证书自动化工具以更新 SSL 证书和信任