There are actually two different keystores used by vRO. Once is on the node itself and the other is stored in the DB. I know there are some post out there on replacing the vRO certificated and for me I have ended up creating new keystores with the cert and private keys added.
I have bookmarked this - https://blog.netnerds.net/wp-content/uploads/2013/07/ReplaceSSL-vSphere41U3-50.ps1
Inside is a section for VCO that I have keep to use as an example with syntax
##############################################################################
#
# Orchestrator
#
###############################################################################
if ($isvmo) {
$vmoservice = Get-WmiObject -Class Win32_Service -Filter "Name='VMwareOrchestrator'"
if ($vmoservice -ne $null) { $vmoexists = $true }
Write-Host -Foreground "DarkBlue" -Background "White" "Updating Orchestrator.."
Copy-Item -Force "$vmosslnew\rui.crt" $vmossl
Copy-Item -Force "$vmosslnew\rui.key" $vmossl
Copy-Item -Force "$vmosslnew\rui.pfx" $vmossl
if ($vmoexists -eq $true) {
if ((Get-Service VMwareOrchestrator).status -eq "Running") { Stop-Service VMwareOrchestrator ; $startvmo = $true }
}
Remove-Item "$vmossl\jssecacerts"
&"$Infrastructure\jre\bin\keytool.exe" -v -importkeystore -srckeystore "$vmossl\rui.pfx" -srcstoretype pkcs12 -srcstorepass testpassword -srcalias "rui" -destkeystore "$vmossl\jssecacerts" -deststoretype JKS -deststorepass dunesdunes -destkeypass dunesdunes -destalias "dunes"
&"$Infrastructure\jre\bin\keytool.exe" -noprompt -importcert -alias vcenter -keystore "$vmossl\jssecacerts" -storepass dunesdunes -file "$vcsslnew\rui.crt"
Write-Host -Foreground "DarkBlue" -Background "White" "Restarting Orchestrator. This can take a while.."
if ((Get-Service vCOConfiguration).status -eq "Running"){ Restart-Service vCOConfiguration} else { Start-Service vCOConfiguration ; Stop-Service vCOConfiguration}
if ($vmoexists -eq $true) {
if ((Get-Service VMwareOrchestrator).status -eq "Running"){ Restart-Service VMwareOrchestrator } else{ Start-Service VMwareOrchestrator ; Stop-Service VMwareOrchestrator}
}
if ($startvmo -eq $true) {Start-Service VMwareOrchestrator}
}
Steve Beaver
VMware Communities User Moderator
VMware vExpert 2009 - 2020
VMware NSX vExpert - 2019 - 2020
====
Co-Author of "VMware ESX Essentials in the Virtual Data Center"
(ISBN:1420070274) from Auerbach
Come check out my blog: [www.virtualizationpractice.com/blog|http://www.virtualizationpractice.com/blog/]
Come follow me on twitter http://www.twitter.com/sbeaver
**The Cloud is a journey, not a project.**
