Are wildcard certs allowed on VCSA?

[HendersonD]

We want to replace the certificate on our VCSA version 6.7 with a wildcard cert we purchased from GoDaddy last year. The only cert we want to replace is the one that generates the annoying browser warning. Can we use a wildcard cert? I found a few articles on how to replace this cert but they never mention if a wildcard cert is OK

https://haveyoutriedreinstalling.com/2017/07/17/vsphere-6-x-certificates-just-because-you-can-doesnt...

https://thecloudxpert.net/2017/03/howto-replace-a-vmca-certificate-via-the-gui-in-vsphere-6-5-with-p...

How to Install a TLS Certificate on vCenter Server Appliance (VCSA) 6.7 · Pivotal Engineering Journa...

[daphnissov · Accepted solution]

No, wildcard certs are not supported with vSphere.

[HendersonD]

Well, back to GoDaddy I go for another cert so we can get rid of the annoying web browser message

[chaplina]

We are using a GoDaddy wildcard certificate with our VCSA 6.7.

There may be some services that do not support wildcard certs, but the web server works fine with it.

[HendersonD]

So you replaced the cert on the VCSA with a wildcard cert purchased from GoDaddy and the annoying web browser message when you first hit the web interface of the VCSA is gone?

[chaplina]

Correct.

Logging in to Certificate Management via the HTML5 client shows the following using the GoDaddy wildcard cert:

__MACHINE_CERT

machine

vsphere-webclient

[ricardofsantos]

Hi,

Did you get the wildcard certificates working? I'm trying here but no success. Can you share the steps that you did?

[daphnissov]

Wildcard certificates are not officially supported in vSphere. If this is for a business/production environment, you should not use them.

[ricardofsantos]

This is not production, is a LAB setup. I have this wildcard certificate, so If possible I would like to use.