You can replace all VMCA-signed certificates with new VMCA-signed certificates. This process is called renewing certificates. You can renew selected certificates or all certificates in your environment from the vSphere Client.

Prerequisites

For certificate management, you have to supply the password of the administrator of the local domain ([email protected] by default). If you are renewing certificates for a vCenter Server system, you also have to supply the vCenter Single Sign-On credentials for a user with administrator privileges on the vCenter Server system.

Procedure

  1. Log in with the vSphere Client to the vCenter Server connected to the Platform Services Controller.
  2. Specify the user name and password for [email protected] or another member of the vCenter Single Sign-On Administrators group.
    If you specified a different domain during installation, log in as administrator@ mydomain.
  3. Navigate to the Certificate Management UI.
    1. From the Home menu, select Administration.
    2. Under Certificates, click Certificate Management.
  4. Enter the credentials of your vCenter Server.
  5. Renew the machine SSL certificate for the local system.
    1. Select Machine SSL Certificate.
    2. Click Actions > Renew.
    3. Click Renew.
      A message appears that the certificate is renewed.
  6. (Optional) Renew the Solution User certificates for the local system.
    1. Under Solution Certificates, select a certificate.
    2. Click Actions > Renew to renew individual selected certificates, or click Renew All to renew all solution user certificates.
      A message appears that the certificate is renewed.
  7. If your environment includes an external Platform Services Controller, you can then renew the certificates for each vCenter Server system.
    1. Click the Logout button in the Certificate Management panel.
    2. When prompted, specify the IP address or FQDN of the vCenter Server system and user name and password of a vCenter Server administrator who can authenticate to vCenter Single Sign-On.
    3. Renew the machine SSL certificate on the vCenter Server and, optionally, each solution user certificate.
    4. If you have multiple vCenter Server systems in your environment, repeat the process for each system.

What to do next

Restart services on the Platform Services Controller. You can either restart the Platform Services Controller, or run the following commands from the command line. 
service-control --stop --all
service-control --start --all

On Windows, the service-control command is located in the VCENTER_INSTALL_PATH\bin directory.