What to read next Changing the Default Certificate of the ControllerThe NSX Advanced Load Balancer Controller can be accessed through the UI using the default certificate associated with it, but users get a warning message regarding certificate mismatch or certificate trust. To avoid a browser warning message while accessing the Controller, install the complete certificate chain matching the FQDN of the Controller and replace the default Controller certificate with the new certificate. Renew Default (Self-Signed) Certificates on NSX Advanced Load BalancerThe default certificate on NSX Advanced Load Balancer is self-signed. This section explains how to replace the default certificate when the certificate is expired or is about to expire. The following steps can also be used to replace the self-signed certificate with a third-party signed certificate. Configure Stronger SSL CipherThis section explains how to Configure Stronger SSL Cipher. User Interface Inaccessible Due to Wrong CertificateThere can be instances where the NSX Advanced Load Balancer user interface is not accessible, but the Controller is reachable through CLI access. Import Encrypted Private Key to Install an SSL CertificateYou can import an encrypted private key to install an SSL certificate on NSX Advanced Load Balancer. Password associated with an encrypted private key can be provided using the Key Passphrase option, available in the NSX Advanced Load Balancer UI while creating an SSL certificate. NSX Advanced Load Balancer uses the provided passphrase to decrypt the private key while installing the SSL certificate. Venafi IntegrationThe NSX Advanced Load Balancer can be set up to integrate with the Venafi Trust Protection Platform™ for automation of SSL and TLS certificate life-cycle management. All certificates will be protected and controlled through TPP. This process is transparent to the NSX Advanced Load Balancer Controllers. Integrating Let's Encrypt Certificate Authority with NSX Advanced Load BalancerLet’s Encrypt is a free, automated (automates both issuing and renewing the certificate) and open certificate authority. The following section describes integration of Let's Encrypt Certificate Authority with NSX Advanced Load Balancer. Certificate Management Integration for CSR AutomationNSX Advanced Load Balancer supports automation of the process for requesting and installing a certificate signed by a certificate authority (CA). This feature handles initial certificate registration and renewal of certificates based on certificate expiration. This topic explains configuring certificate management integration and automatic certificate renewal. SSL CertificatesNSX Advanced Load Balancer supports terminating client SSL and TLS connections at the virtual service, which requires it to send a certificate to clients that authenticate the site and establishes secure communications. Parent topic: CLI Access Settings
