Create a campaign package to replace the newly created SSL certificate.


  1. A Package Management CLI tool and a basic understanding of the campaign package creation.
  2. Download the Package Management CLI tool from Downloads in VMware Pulse IoT Center UI. Perform the following steps:
    1. Log in to VMware Pulse IoT Center.
    2. Navigate to Settings on the top right side and click Downloads.
    3. Click Downloads links on Package Management CLI.
    4. Extracti the Package Management CLI. Select the appropriate package-cliexecutable based on the machine from where the package is created.


  1. Use the example-iotc-package folder as a reference, and create a duplicate copy of it.
    For example, create a copy of the example-iotc-package folder under example-packages and rename the new folder to LB_Cert_Sources.
  2. Remove the unnecessary files from LB_Cert_Sources.
  3. Copy the newly created SSL certificate into it. In this example, keep only,, package-spec.yml and readme.txt .
  4. Edit the package-spec.yml file to bundle the new SSL certificate with the and scripts into a campaign package.
    Note: Select the appropriate values of name, description, version, architecture, os, and labels.
  5. Edit the script file to copy the LoadBalancer.crt file into /opt/vmware/iotc-agent/certs or /etc/ssl/certs (based on the agent's configuration value rootCACertDirPath) and replace the old VMware Pulse IoT Center IPs with a new load balancer IP.
    Use the appropriate bash/commands based on the gateway's platform.
  6. Edit the script file to restart the iotc-agent on the gateway.
    Use the appropriate bash imports based on the gateway's platform.
  7. Run the package create command using package-cli to generate the campaign package.

    To create a package, run the following command:

    package-cli directory > ./package-cli package create <parent directory path to spec file>/package-spec.yml

  8. Use the generated *.iotcp file to create a campaign and run.