Configure or Update Trusted Root Certificates for VMware Data Services Manager

If you want to use CA certificates in your VMware Data Services Manager environment, you must add a trusted root certificate to the certificate store. You can also update existing certificates. You can do so using the vSphere Client or the DSM console.

VMware Data Services Manager can use the certificates added to the store to access external locations, such as vCenter Server, backup locations, and SMTP.

Prerequisites

• Verify that the root certificate or certificate chain you want to add is available on your machine.
• Verify that you have the required privileges: CertificateManagement.Manage and CertificateManagement.Administer.

Procedure

1. Navigate to the Trusted Root Certificates view.

   Option	Description
   From the vSphere Client	In the vSphere Client, navigate to vCenter Server and click the Configure tab. Click Trusted Root Certificates under Data Services Manager to view, add, update, or remove the trusted root certificates.
   From the DSM console	In the DSM console, click Settings from the left navigation pane. Click the Trusted Root Certificatestab to view, add, update, or remove the trusted root certificates.

2. In the Trusted Root Certificates view, click Add.
3. Paste a PEM encoded certificate into the window.
4. Click Add.
   The certificate is added to the store and appears on the list of custom certificates. Details show the certificate's expiration time and date.

What to do next

If you want to update the certificate before it expires or remove it from the store, select the certificate and click Update or Remove.