In an on-premises or in a cloud vCenter Server site, to replace the SSL certificate of the VMware Cloud Director Availability appliance, use its service management interface.

This procedure applies for the following appliance roles:
  • VMware Cloud Director Availability On-Premises Appliance roles:
    • On-Premises to Cloud Director Replication Appliance
    • On-Premises to Cloud vCenter Replication Appliance
and for
  • vCenter Replication Management Appliance
For information about replacing the certificates in a cloud site backed by VMware Cloud Director, see Certificates Management.

Procedure

  1. Log in to the management interface of the VMware Cloud Director Availability appliance.
    1. In a Web browser, go to https://Appliance-IP-Address/ui/admin.
    2. Select Appliance login or SSO login and enter the root or the single sign-on user credentials.
    3. Click Login.
  2. In the left pane, click Settings.
  3. Under Appliance settings, next to Certificate replace the appliance certificate and click Apply.
    • To import an SSL certificate, click Import and in the Import Certificate window, enter the certificate details.
    1. Enter the password that protects the keystore and the certificate private key.
    2. Click Browse and select the PKCS#12 file.
    • Alternatively, to generate a new self-signed certificate, click Regenerate.
    After replacing the certificate, the VMware Cloud Director Availability services that run in the appliance restart.
  4. After replacing the certificate, redeploy the VMware Cloud Director Availability vSphere Client Plug-In by reapplying the vCenter Server Lookup service address.
    1. Under Service endpoints, next to Lookup Service Address click Edit.
    2. Enter the single-sign-on user credentials and click Apply.
    Option Description
    SSO Admin Username Enter the vSphere administrator user name for the vCenter Server Lookup service that belongs to the ADMINISTRATORS group.
    Password Enter the vSphere administrator user password for the vCenter Server Lookup service.
  5. After replacing either or both of their certificates, repair the On-Premises to Cloud vCenter Replication Appliance and the vCenter Replication Management Appliance.
    Skip this step after replacing the certificate of the On-Premises to Cloud Director Replication Appliance.
    1. After replacing the local site certificate, to re-establish the trust log in to the appliance management interface of the remote site.
    2. In the left pane, click Settings.
    3. Under Site settings next to Pairing, click Repair.
    4. To re-establish the trust with the site that has a replaced certificate, in the Update Pairing window confirm the Service Endpoint.
      Option Description
      Service Endpoint
      • Enter the address of the Service Endpoint:443 of the remote VMware Cloud Director Availability appliance.
      • Alternatively, enter port 8048 when both VMware Cloud Director Availability appliances reside in the same network.
      Description Optionally, enter a description for this vSphere site as an identifier.
      Verify the thumbprint and accept the SSL certificate of the Service Endpoint in the remote vCenter Server site.
    5. To re-establish the trust after replacing the remote site certificate, log in to the local site appliance management interface and repeat this step.