If any members of your vCloud Director server group are using self-signed SSL certificates, you can upgrade them to signed SSL certificates to obtain a higher level of trust within your cloud.
You can use the cell management tool (CMT) certificates subcommand to upgrade the SSL certificates on a vCloud Director server. See Replacing Certificates for the HTTP and Console Proxy Endpoints for details.
Each vCloud Director server requires two SSL certificates, one for each of its IP addresses, in a Java keystore file. You must run the CMT utility for each member of your vCloud Director server group. You can use signed certificates (signed by a trusted certification authority) or self-signed certificates. Signed certificates provide the highest level of trust.