Can't replace or delete sso expared certificate after update vcenter 5.5 to 6.0.

[Pavellu]

Hi!

Can't replace or delete sso expared certificate after update vcenter 5.5 to 6.0.

I already replaced Machine SSL and Solution user certificate with custom certificate (1 and 5 option in certificate manager), but still have expired certificate status alarm.

Expired certificate store in TRUSTED_ROOTS (can't delete) and use for SSO (on my opinion, because use on https://127.0.0.1:7444/sso-adminserver/sdk/vsphere.local)

I try to use certificate updater tool, but got error like SSO is not install on this server.

This problem interrupt update vcenter from 6 to 6.5

Current Vcenter version - 3634793

What's the matter?

[parmarr]

Hello,

Please see the link below to see if provides any quidance on what you are looking to achieve as it talks aboue Managing Certificates via the Certificate Manager:

https://docs.vmware.com/en/VMware-vSphere/6.0/com.vmware.vsphere.security.doc/GUID-E1D35792-ED03-468...

[Pavellu · Accepted solution]

Solution:

https://kb.vmware.com/kb/2118939