The TLS Configuration utility performs a backup each time the script modifies vCenter Server. If you need a backup to a specific directory, you can perform a manual backup.

Backup of the ESXi configuration is not supported.

For vCenter Server, the default directory is /tmp/yearmonthdayTtime.


  1. Change directory to /usr/lib/vmware-TlsReconfigurator/VcTlsReconfigurator.
  2. To make a backup to a specific directory, run the following command.
    directory_path/VcTlsReconfigurator> ./reconfigureVc backup -d backup_directory_path
  3. Verify that the backup was successful.
    A successful backup looks similar to the following example. The order of services displayed might be different each time you run the reconfigureVc backup command, due to the way the command runs.
    vCenter Transport Layer Security reconfigurator, version=7.0.0, build=15518531
    For more information refer to the following article:
    Log file: "/var/log/vmware/vSphere-TlsReconfigurator/VcTlsReconfigurator.log".
    ================= Backing up vCenter Server TLS configuration ==================
    Using backup directory: /tmp/20200206T183550
    Backing up: vmware-rbd-watchdog
    Backing up: vmware-vpxd
    Backing up: vmcam
    Backing up: vmware-stsd
    Backing up: vmdird
    Backing up: vmware-sps
    Backing up: vmware-rhttpproxy
    Backing up: vami-lighttp
    Backing up: vmware-updatemgr
    Backing up: rsyslog
  4. (Optional) If you later have to perform a restore, you can run the following command.
    reconfigureVc restore -d optional_custom_backup_directory_path