Andrew50
Contributor
Contributor

Recreate self-signed certificates using the API

I'm trying to script the update of development environments using the NSX-T APIs.

However, when creating a new self-signed certificate from a CSR I can't see an option in the API to un-toggle "Service Certificate".

The API I've got is:

POST https://nsx-mgmt.vcf.sddc.lab/policy/api/v1/infra/csrs/Test-mp-cluster?action=self_sign&days_valid=3...

The above POST creates a self signed certificate of type "Service Certificate" that you can't use for NSX Manager Nodes, Custer VIPs or the Local Manager.

Has anyone else done this?

Labels (1)
Tags (1)
0 Kudos
0 Replies