Certificates

[DeepBlueDicer]

Hi,

We are running vCenter 6.5 and the STS certificate is going to expire. My understanding is that we need to use fixsts to replace the certificate. What I am struggling to understand or find an answer to is that the Machine and Solution User certs are also about to expire. If we replace the STS cert before it or the others expire, do the machine and solution user certs renew automatically or do I need to follow manual steps to renew these ?

Any help much appreciated.

[Ajay1988 · Accepted solution]

First update STS certs using fixsts (https://kb.vmware.com/s/article/76719) and then replace all other certs  (machine,solution-users) using   https://kb.vmware.com/s/article/2112283. 

[DeepBlueDicer]

Thank you for that. Is there any reason to do it using the CLI and not the using renew in the HTML5 client if root cert has not expired?

[Ajay1988]

I just prefer CLI as u can use option 8 and get all other certs to the same date( Managing the cert expiry dates becomes easier)