How to find out expiration dates of certificates on a VMware vCenter Server

This video will overview on out expiration dates of certificates on a VMware vCenter Server.

Welcome to Dell Technologies Integrated Data Protection Appliance (IDPA).

How to find out expiration dates of certificates on a vCenter Server. Reference Dell Knowledge Article 181665. This video will show: How to find out certificate expiration dates on PowerProtect IDPA appliances. Please note that: An expired certificate may cause vCenter to be inaccessible when connecting from a browser. VMware recommends replacing the certificate if it is set to expire within 6 months.

If the expiry date will occur in more than 6 months, schedule the certificate replacement at the appropriate time. Connect to the vSphere HTML 5 Client through the vCenter user interface. Go to the Home menu, then select "Administration". Under "Certificates", click on "Certificate Management". Log in to the local host using an Administrator account. Here you can see the certificates and their expiration information.

It is very important to note that the VMware Security Token Service (STS) certificate can be viewed in the HTML 5 Client only on vCenter Server 7.0 Update 2 and later. The earlier versions do not show STS certificate info in the HTML 5 Client and you must utilize the vCenter CLI as demonstrated in the next section. Please note that: An expired certificate may cause vCenter to be inaccessible when connecting from a browser.

In such cases, you can still check the certificate information from the vCenter CLI. You can view the certificate information in the vCenter CLI using the command shown here. Certificate information can also be found by using a Python Script "checksts.py". Please refer to VMware KB Article 79248 for instructions on how to download and use this script. Please reference the following for more information.

Thank you for watching.