ESXi SSL certificate and key:
/etc/vmware/ssl/rui.crt
/etc/vmware/ssl/rui.key
Steps:
1. SSH to the ESXi node with 'root' account.
2. Stop the DellPTAgent service with the following command:
/etc/init.d/DellPTAgent stop
3. Update the PTAgent certificate parameter with the following values in the PTAgent.config:
"certificate_store_path": {
"description": "List of SSL certificates file path",
"value": "/opt/dell/DellPTAgent/secure/rui.crt,/opt/dell/DellPTAgent/secure/rui.key,/opt/dell/DellPTAgent/secure/pta_dhparm.pem
"defaultValue": "/opt/dell/DellPTAgent/secure/pta_server.crt,/opt/dell/DellPTAgent/secure/pta_server.key,/opt/dell/DellPTAgent/secure/pta_dhparm.pem
},
4. Start the DellPTAgent service with the following command:
/etc/init.d/DellPTAgent start
5. Check the PTAgent running status with the following command:
/etc/init.d/DellPTAgent status
esxcli network ip connection list | grep LISTEN | grep Dell
DellPTAgent is running
tcp 0 0 {ESXi_host_ipv4_address}/{ESXi_host_ipv6_address}:8086 0.0.0.0:0 LISTEN 3992948 newreno DellPTAgent
6. Verify the PTAgent certificate with the following command:
openssl s_client -connect {ESXi_host_ipv4_address}/{ESXi_host_ipv6_address}:8086
Note: The PTAgent certificates should have updated with ESXi host SSL certificate successfully.
If there are any issues or the certthroughificate is not updated, contact the Dell Technologies Support Center or your service representative for technical support and quote this article ID.
7. Repeat the step 1 ~ step 6 for other nodes in the same VxRail cluster.