2 Posts
0
2515
VXrail certificate renewal process
Hello all,
We are planning to renew vCenter Machine SSL certificate.
The question is, shall we also renew VXrail Manager (version 7.0.370) SSL certificate after renewing vCenter's SSL certificate?
If the answer is yes, shall we create separate CSR for VXrail manager and make it signed by CA?
I have so many questions about certificate renewal process. Could anyone provide information with details?
(I checked SOLVE portal, it only mentions that renewal process is done via Vcenter GUI. This information does not help at all.)
Thanks.
DELL-Josh Cr
Moderator
Moderator
•
8.6K Posts
0
May 16th, 2022 14:00
Hi,
Thanks for your question about the SSL certificate on Vxrail. On version 7.0.370 it should import from Vcenter automatically and not need to be done separately.
Let us know if you have any additional questions.
shirano2
1 Rookie
1 Rookie
•
60 Posts
1
May 16th, 2022 16:00
> The question is, shall we also renew VXrail Manager (version 7.0.370) SSL certificate after renewing vCenter's SSL certificate?
No.
It is no need to replace VxRail Manager machine SSL if VxRail Manager machine ssl is not expire.
VxRail Manager imports VMCA root cert automatically to communicate securely to VCSA.
When you renew VMCA root cert and vCenter machine SSL, VMCA root cert will imported to VxRail Manager automatically.
If it cannot display information VxRail via vSphere Client after renew VMCA, it may not import automatically.
You should import manually regard to KB000077894.
https://www.dell.com/support/kbdoc/ja-jp/000077894
yzgulec
2 Posts
0
May 17th, 2022 03:00
Thanks for answers. They really helped me.
Is there any trick I should know before changing vCenter certificate? Maybe you have previous experiences.
I am basically planning:
- Certificate Signing Request (CSR) will be created via vCenter GUI
- CSR will be sent to CA and new SSL will be created by CA
- New SSL Certificate will be imported via vCenter GUI
shirano2
1 Rookie
1 Rookie
•
60 Posts
0
May 17th, 2022 04:00
If you are using default certificate and you want to renew it, you should follow KB000082108.
https://www.dell.com/support/kbdoc/ja-jp/000082108
It is a all perfect procedure for renew certificate.
If you are using custom certificate or want to replace to custom cert, you must consider for more.