If you want to use CA certificates in your VMware Data Services Manager environment, you must add a trusted root certificate to the certificate store.

Configure or Update Trusted Root Certificates

You can add a trusted root certificate to the certificate store or update existing certificates. You can do so using the vSphere Client or the DSM console.

VMware Data Services Manager can use the certificates added to the store to access external locations, such as vCenter Server, backup locations, and SMTP.
Important: You can add only root certificates to the global Trusted Root Certificates of VMware Data Services Manager. Intermediate CA certificates are not compatible and you must not add them to the Trusted Root Certificates.

Prerequisites

  • Verify that the root certificate or certificate chain you want to add is available on your machine.
  • Verify that you have the required privileges: CertificateManagement.Manage and CertificateManagement.Administer.

Procedure

  1. Navigate to the Trusted Root Certificates view.
    Option Description
    From the vSphere Client
    1. In the vSphere Client, navigate to vCenter Server and click the Configure tab.
    2. Click Trusted Root Certificates under Data Services Manager to view, add, update, or remove the trusted root certificates.

    Add root certificate from the vSphere Client
    From the DSM console
    1. In the DSM console, click Settings from the left navigation pane.
    2. Click the Trusted Root Certificatestab to view, add, update, or remove the trusted root certificates.

    Configure root certificate from the DSM console
  2. In the Trusted Root Certificates view, click Add.
  3. Paste a PEM encoded certificate into the window.
  4. Click Add.
    The certificate is added to the store and appears on the list of custom certificates. Details show the certificate's expiration time and date.

What to do next

If you want to update the certificate before it expires or remove it from the store, select the certificate and click Update or Remove.

Updating Modified vCenter Server Certificates in VMware Data Services Manager

A vCenter Server certificate might rotate when it expires or is refreshed.

When the vCenter Server root certificate changes, you must download the trusted root bundle from vCenter Server and manually update the .pem file in the VMware Data Services Manager Trusted Root Certificates section.