After you deploy all three NSX-T Global Manager nodes, assign the virtual IP (VIP) address of the NSX-T Global Manager cluster and assign a certificate for the VIP address for trusted access to the user interface and API.

You use the CA-signed certificate that you prepared earlier by using the CertGenVVD utility.

Procedure

  1. In a Web browser, log in to the first NSX-T Global Manager node for the management domain in Region B by using the user interface.
    Setting Value
    URL lax-m01-nsxgm01a.lax.rainpole.io
    User name admin
    Password nsx_t_admin_password
  2. Assign the virtual IP address to the NSX-T Global Manager cluster.
    1. On the main navigation bar, click System.
    2. In the navigation pane, select Global Manager Appliances.
    3. Click Set Virtual IP, and, in the Set virtual IP dialog box, enter 172.17.11.85, and click Save.
    4. When prompted, click Refresh.
  3. Retrieve the ID of the certificate for the NSX-T Global Manager node.
    1. On the main navigation bar, click System.
    2. In the navigation pane, select Certificates.
    3. Click the ID value of the lax-m01-nsx-gm01 certificate , copy its value from the text box, and save it to use it later.
  4. Log in to the host that has access to your data center.
  5. Assign a certificate to the NSX-T Manager cluster.
    1. Start the Postman application in your Web browser and log in.
    2. On the Authorization tab, configure these settings and click Update request.

      Setting

      Value

      Type

      Basic Auth

      User name

      admin

      Password

      nsx_t_admin_password

    3. On the Headers tab, enter the header details.

      Setting

      Value

      Key

      Content-Type

      Key Value

      application/xml

    4. In the request pane at the top, from the drop-down menu that contains the HTTP request methods, select POST, and in the URL text box, send the URL query.

      Setting

      Value

      HTTP request methods

      POST

      URL

      https://lax-m01-nsx-gm01.lax.rainpole.io/api/v1/cluster/api-certificate?action=set_cluster_certificate&certificate_id=lax-m01-nsx-gm01_certificate_ID

      After the NSX-T Manager appliance sends a response back, on the Body tab, you see a 200 OK status.