Replace self-signed 'router' certificate

ScobyD000 — Tue, 11 Jul 2023 09:56:11 GMT

Hi All,

We have a policy to replace self-signed certificates in our environment with our own PKI certificates (wherever possible). Our Horizon connection servers are presenting self-signed certificates issued to "router/<servername>" on ports 4101 and 4002. From what I can see these are for replication between the servers and not used for clients but is it possible to replace them? I cannot find them in the certificate store.

Thanks

Re: Replace self-signed 'router' certificate

ScobyD000 — Tue, 18 Jul 2023 08:50:28 GMT

I was told it is not possible to replace these certificates but using them seems to be the most secure method. They can be turned off:

Message Security Mode for Horizon Components in VMware Horizon 8

topic Re: Replace self-signed 'router' certificate in Horizon Cloud

Replace self-signed 'router' certificate

Re: Replace self-signed 'router' certificate