While deploying vRSLCM from SDDC Manager, it throws an error "Replacing vRSLCM certification failed".
/var/log/vmware/vcf/domainmanager/domainmanager.log:
Error while executing 'create csr config'
vRSLCM requires bi-directional communication between SDDC Manager and vRSLCM VMs on port 22 for SSH.
If there is only one-way traffic between these VMs, it fails to replace the certificates.
To resolve this issue, verify the connectivity between VMs:
Using an SSH session, run this command from vRSLCM VM:
curl -v telnet://ssdc manager IP:22
Using an SSH session, run this command from SDDC Manager VM:
curl -v telnet://vRSLCM IP:22
Perform any updates to firewall rules as per the results obtained from the above commands.