Package the generated key pairs, CA-signed certificates, and CA chain.

Prerequisites

If the key files are password protected, you must have the password. All password-protected key files must have the same password.

Procedure

In the /opt/vmware/cert-mgmt/bin directory of the SDDC Manager Controller VM, type the following command.
./vcfcerthelper \
--config_file config.json \
--cert_dir SignedByMSCACerts \
--password 'psswd' \
--action build-certrepl-config

Parameter

Description

--config_file

Configuration file you built for the Certificate Generation tool.

--cert_dir

Directory where the CA signed certificates are stored.

--password

Key password.

--action

Action to be performed.

The file package is created in the same directory that contains the CA signed certificates.