Upgrade Internal Certificates

If you install the vRealize Operations 8.10 version and keep it for five years, your cluster may fail due to expired certificates. Use the certificate renewal PAK file to restore the cluster with expired certificates. If you upgrade your vRealize Operations instance from an older version to 8.10, the internal certificates are also upgraded and you do need the certificate renewal PAK file.

Prerequisites

• Verify if the cluster fail is due to the expired certificates and if the certificates need to be upgraded.
  Note: If your internal certificates have expired, install the vRealize_Operations_Manager_Enterprise_Certificate_Renewal_PAK manually. For more information, see the following KB article 71018.
• Obtain the PAK file for your cluster, go to the Patch Portal, select vRealize Operations certificate renewal and the version number and then click Search.
  Note: The certificate renewal PAK is a standalone tool used only for the vRealize Operations internal certificate renew.

Procedure

1. Log into the vRealize Operations administrator interface of your cluster at https://master-node-FQDN-or-IP-address/admin.
2. Take the vRealize Operations cluster offline. For more information, see vRealize Operations Cluster Management.
3. Install the vRealize_Operations_Manager_Enterprise_Certificate_Renewal_PAK to upgrade your internal certificates. For more information, see the Install a Software Update topic in the vRealize Operations vApp Deployment Guide.
   Note: After the installation is complete, the administrator interface logs you out.
4. Log back into the vRealize Operations administrator interface.
5. Bring the vRealize Operations cluster back online.
   After the cluster goes online, the upgrade is complete.