You can deploy the VMware Cloud Director appliance with signed wildcard certificates. You can use these certificates to secure an unlimited number of servers that are subdomains of the domain name listed in the certificate.
certificates command appears to work correctly, but after a cell restart, the changes are not in effect because the cell no longer reads the certificate files from the files on-disk. In version 10.5.1 and later,
VMware Cloud Director reads the certificates from the
Certificates Library.
By default, when deploying VMware Cloud Director appliances, VMware Cloud Director generates self-signed certificates and uses them to configure the VMware Cloud Director cell for the HTTPS communication.
Starting with VMware Cloud Director 10.4, both the console proxy traffic and HTTPS communications go over the default 443 port. You do not need a separate certificate for the console proxy.
When you successfully deploy a primary appliance, the appliance configuration logic copies the responses.properties file from the primary appliance to the common NFS shared transfer service storage at /opt/vmware/vcloud-director/data/transfer. Other appliances deployed for this VMware Cloud Director server group use this file to configure themselves automatically. The responses.properties file includes a path to the SSL certificate and private key, which includes the auto-generated self-signed certificates user.certificate.path and private key user.key.path. By default, these paths are to PEM files which are local to each appliance.
After you deploy the primary appliance, you can reconfigure it to use signed certificates. For more information on creating the signed certificates, see Create and Import CA-Signed SSL Certificates for Your VMware Cloud Director 10.5.0 Appliance.
If the signed certificates you use on the primary VMware Cloud Director appliance are wildcard signed certificates, these certificates can apply to all other appliances in the VMware Cloud Director server group, that is, standby cells and VMware Cloud Director application cells. You can use the deployment of the appliance with signed wildcard certificates for HTTPS communication to configure the additional cells with the signed wildcard SSL certificates.
Prerequisites
To verify that this is the relevant procedure for your environment needs, familiarize yourself with SSL Certificate Creation and Management of Your VMware Cloud Director Appliance.
