Replace the CA-Signed Certificate on vSphere Replication in Region A

In a dual-region SDDC, replace the default certificate on vSphere Replication in Region A with a custom one for improved security. Reconnect the sites in Region A and Region B to update the new certificate on Region B.

About this task

You start replacing certificates on vSphere Replication in Region A sfo01m01vrms01.sfo01.rainpole.local first.

Table 1. PKCS#12 Files for vSphere Replication in Region A

vSphere Replication	PKCS#12 File Name from the CertGenVVD Tool
sfo01m01vrms01.sfo01.rainpole.local	sfo01m01vrms01.5.p12

Procedure

1. Upload the PKCS#12 file to vSphere Replication by using the vSphere Replication appliance management interface (VAMI).
   1. Open a Web browser and go to the following URL.

      vSphere Replication	URL
      vSphere Replication in Region A	https://sfo01m01vrms01.sfo01.rainpole.local:5480

   2. Log in using the following credentials.

      Setting	Value
      User name	root
      Password	vr_root_password

   3. On the VR tab, click the Configuration tab.
   4. Enter the password of the service account [e-mail].
   5. Click Choose File next to Upload PKCS#12 (*.pfx) file  and locate the sfo01m01vrms01.5.p12 file on your local file system.
   6. Click the Upload and Install button and enter the certificate password when prompted. 

   After you change the SSL certificate, the vSphere Replication status changes to disconnected because the new certificate is not validated by the vSphere Replication instance in the other site.

2. Reconnect the sites to resolve the connection issue.
   1. Open a Web browser and go to https://sfo01m01vc01.sfo01.rainpole.local/vsphere-client.
   2. Log in using the following credentials.

      Setting	Value
      User name	[e-mail]
      Password	vsphere_admin_password

   3. On the vSphere Web Client Home page, click vSphere Replication.
   4. On the Home tab, select sfo01m01vc01.sfo01.rainpole.local, click Manage, and select Target Sites.
   5. Right-click lax01m01vc01.lax01.rainpole.local and click Reconnect site.
   6. In the Reconnect Sites dialog box, click Yes to proceed.