To establish a trusted connection to vRealize Suite Lifecycle Manager, you replace the SSL certificate on the appliance by using the SDDC Manager UI.


  1. In the navigation pane, click Inventory > Workload Domains.
  2. On the Workload Domain page, from the table, in the domain column click the management domain.
  3. On the domain summary page, click the Security tab.
  4. From the table, select the check box for the vrslcm resource type, and click Generate CSRs.
  5. On the Details page, enter the following settings and click Next.




    Select the key algorithm for the certificate.

    Key Size

    Select the key size (2048 bit, 3072 bit, or 4096 bit) from the drop-down menu.


    Optionally, enter a contact email address.

    Organizational Unit

    Use this field to differentiate between divisions within your organization with which this certificate is associated.

    Organization Name

    Type the name under which your company is known. The listed organization must be the legal registrant of the domain name in the certificate request.


    Type the city or locality where your company is legally registered.


    Type the full name (do not abbreviate) of the state, province, region, or territory where your company is legally registered.


    Type the country name where your company is legally registered. This value must use the ISO 3166 country code.

  6. On the Subject Alternative Name page, leave the default SAN and click Next.
  7. On the Summary page, click Generate CSRs.
  8. After the successful return of the operation, click Generate signed certificates.
  9. In the Generate Certificates dialog box, from the Select Certificate Authority drop-down menu, select Microsoft.
  10. Click Generate certificates.
  11. After the successful return of the operation, click Install certificates.

    Wait for the successful return of the operation.