[certificate manager] - Which option to choose?

[Skorp85]

Hi,

I want to set a custom certificate to my vcenter 6.5 and all of my ESXi.

I launch the command line "/usr/lib/vmware-vmca/bin/certificate-manager" on my vcenter Appliance but I don't know which option to choose :

1. Replace Machine SSL certificate with Custom Certificate    

2. Replace VMCA Root certificate with Custom Signing Certificate and replace all Certificates                   

3. Replace Machine SSL certificate with VMCA Certificate

What's the difference between this 3 options ? Which option best suits my needs?

Thanks

PS : English is not my first language

[Harishtoy]

Please share more information about your vCenter setup.

Hope below article can help you with more information.

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=21122...

[Skorp85]

Hi,

I have a vcenter with an embedded PSC. So I Guess it's the first option that I need to choose ... ?

[Harishtoy]

If embedded PSC, follow second option

this -- https://www.youtube.com/watch?time_continue=1&v=uQPTH3I-L7M

[Harishtoy · Accepted solution]

ops sorry.

Yes, select first option.

"1. Replace Machine SSL certificate with Custom Certificate "

[Skorp85]

Thanks for your answer but the youtube video you linked show the process with option 1

Did you mean option 1 in your last message ?

EDIT : I just saw your last message ! I'll go with option one then.

Thanks a lot