After you deploy the first NSX-T Manager appliance and you generate the certificates for each NSX-T Manager node and for the virtual IP address of the cluster, import the certificates in to the appliance by using the NSX-T Manager user interface. Later, you replace the certificate on each node.

Table 1. Certificate Configuration for the NSX-T Manager Nodes
Setting Value for sfo01wnsx01a Value for sfo01wnsx01b Value for sfo01wnsx01c Value for the Cluster Virtual IP Value for the CA Certificate
Name

sfo01wnsx01a

sfo01wnsx01b

sfo01wnsx01c

sfo01wnsx01

Rainpole Root CA

Certificate Contents sfo01wnsx01a.1.cer sfo01wnsx01b.1.cer sfo01wnsx01c.1.cer sfo01wnsx01.1.cer Root64.cer
Private Key sfo01wnsx01a.key sfo01wnsx01b.key sfo01wnsx01c.key sfo01wnsx01.key N/A
Password certificate_password certificate_password certificate_password certificate_password certificate_password
Confirm Password certificate_password certificate_password certificate_password certificate_password certificate_password
Service Certificate No No No No No

Procedure

  1. Log in to the user interface of the first NSX-T Manager appliance.
    1. Open a Web browser and go to https://sfo01wnsx01a.sfo01.rainpole.local.
    2. Log in by using the following credentials.
      Setting Value
      User name admin
      Password nsx_admin_password
  2. Import the root CA certificate.
    1. On the main navigation bar, click System.
    2. In the left pane, click Certificates.
    3. Click Import > Import CA certificate.
    4. Enter the values and click Import.
  3. Import the certificates for the NSX-T Manager appliances and the virtual IP address of the cluster.
    1. On the main navigation bar, click System.
    2. In the left pane, click Certificates.
    3. Click Import > Import certificate.
    4. Enter the values and click Import.
    5. Repeat this step to import the certificates for all NSX-T Manager nodes.