Managing SSL Certificates

You can use lmvutil command options to create and activate pending SSL certificates in a Cloud Pod Architecture environment.

The Cloud Pod Architecture feature uses signed certificates for bidirectional SSL to protect and validate the VIPA communication channel. The certificates are distributed in the Global Data Layer. The Cloud Pod Architecture feature replaces these certificates every seven days.

To change a certificate for a specific Connection Server instance, you create a pending certificate, wait for the Global Data Layer replication process to distribute the certificate to all Connection Server instances, and activate the certificate.

The lmvutil command certificate options are intended for use only if a certificate becomes compromised and a Horizon administrator wants to update the certificate sooner than seven days. These options affect only the Connection Server instance on which they are run. To change all certificates, you must run the options on every Connection Server instance.