You can replace vCenter Server Appliance certificates. Because the Certificate Automation Tool is supported only on Windows, you must replace the certificates by hand.

Replacing the default SSL certificate and key with a self-signed or CA-signed certificate on vCenter Server Appliance is a manual process. You cannot use the Certificate Automation Tool to update the certificate and key on Linux.


Obtain certificate files (including the certificate and private key).


  • Follow the steps in VMware Knowledge Base article 2057223.