To use an external certificate for SAML signing, you must generate a Certificate Signing Request (CSR) from the VMware Identity Manager console. The CSR is sent to a certificate authority to generate the SSL certificate.
Note: A certificate generated without the CSR from the
VMware Identity Manager console is not supported.
Procedure
What to do next
When you receive the certificate, upload the certificate to the VMware Identity Manager service. The CA replaces the self-signed certificate.