In a dual-region SDDC, replace the default certificate on vSphere Replication in Region A with a custom one for improved security. Reconnect the sites in Region A and Region B to update the new certificate on Region B.
About this task
You start replacing certificates on vSphere Replication in Region A sfo01m01vrms01.sfo01.rainpole.local
first.
Table 1.
PKCS#12 Files for vSphere Replication in Region A
vSphere Replication |
PKCS#12 File Name from the CertGenVVD Tool |
sfo01m01vrms01.sfo01.rainpole.local |
sfo01m01vrms01.5.p12 |
Procedure
- Upload the PKCS#12 file to vSphere Replication by using the vSphere Replication appliance management interface (VAMI).
- Open a Web browser and go to the following URL.
vSphere Replication |
URL |
vSphere Replication in Region A |
https://sfo01m01vrms01.sfo01.rainpole.local:5480 |
- Log in using the following credentials.
Setting |
Value |
User name |
root |
Password |
vr_root_password |
- On the VR tab, click the Configuration tab.
- Enter the password of the service account svc-vr@rainpole.local.
- Click Choose File next to Upload PKCS#12 (*.pfx) file and locate the sfo01m01vrms01.5.p12 file on your local file system.
- Click the Upload and Install button and enter the certificate password when prompted.
After you change the SSL certificate, the vSphere Replication status changes to disconnected because the new certificate is not validated by the vSphere Replication instance in the other site.
- Reconnect the sites to resolve the connection issue.
- Open a Web browser and go to https://sfo01m01vc01.sfo01.rainpole.local/vsphere-client.
- Log in using the following credentials.
Setting |
Value |
User name |
administrator@vsphere.local |
Password |
vsphere_admin_password |
- On the vSphere Web Client Home page, click vSphere Replication.
- On the Home tab, select sfo01m01vc01.sfo01.rainpole.local, click Manage, and select Target Sites.
- Right-click lax01m01vc01.lax01.rainpole.local and click Reconnect site.
- In the Reconnect Sites dialog box, click Yes to proceed.