To create a trust chain for connecting to the VMware Cloud Foundation components, import the trusted certificate of your certificate authority to vRealize Orchestrator.

UI Procedure

  1. Log in to the vRealize Orchestrator Control Center at https://<vra_cluster_fqdn>/vco-controlcenter as root.

  2. Click Certificates.

  3. Click the Trusted certificates tab and, from the Import drop-down menu, select Import from PEM-encoded file.

  4. Click Browse, navigate to the certificate authority Root64.cer file, and click Import.

  5. Verify the certificate information and click Import.

  6. If there are additional certificate chains that must be trusted by vRealize Orchestrator, repeat this procedure for each additional certificate.

PowerShell Procedure

  1. Start Windows PowerShell.

  2. Replace the values in the sample code with values from your VMware Cloud Foundation Planning and Preparation Workbook and run the commands in the PowerShell console.

    $sddcManagerFqdn = "sfo-vcf01.sfo.rainpole.io"
    $sddcManagerUser = "administrator@vsphere.local"
    $sddcManagerPass = "VMw@re1!"
    
    $vraUser = "configadmin"
    $vraPass = "VMw@re1!"
  3. Perform the configuration by running the command in the PowerShell console.

    Add-vROTrustedCertificate -server $sddcManagerFqdn -user $sddcManagerUser -pass $sddcManagerPass -vraUser $vraUser -vraPass $vraPass
  4. Navigate to the Root CA .cer certificate file and click Open.