How do I apply Workaround to VCHA?

[MICDROP]

Hi, all.

I'm using VCHA, and I'm trying to apply a Workaround (Not Patch, Disable vRops plug-in) that was announced about security vulnerability a month ago. 

Should I destroy VCHA or maintenance and apply Workaround to three vCenters (Active, Peer, Witness)?

Your advice will be of great help!

Thanks in advance & Best Regards.

[jburen]

Personally, I would try to implement the patch/update instead of creating a workaround. But what workaround are you trying to create?

IMHO I think the procedure would be the same when you implement a patch or update.

[pdirmann01]

If I had to guess it's CVE-2021-21972 regarding the 9.8/10 vulnerability with vROPs plugin (blog post regarding it here).I agree with @jburen. If you have the ability to patch, then I would go that route. Tearing down VCHA, patching, then building VCHA back up again isn't that big of a task.