Certificate Manager generate new certs longer than 2 years?

[wreedMH]

Is there anyway to get certifcate manager to generate new certs longer than 2 years? We just ran Option 8 - Reset All Certificates on a embedded vCenter and it only renewed for 2 years.

[Alex_Romeo]

Hi,

Which version of VMware are you using?

VMware Knowledge Base

Expires every 10 years from version 6.x up (see attachment on page 71 for 6.0 and 83 for 6.7)

ARomeo

[wreedMH]

6.7 U3g

[Alex_Romeo]

ok! therefore it must expire every 10 years. Try repeating the procedure following the manual I added in the previous answer.

ARomeo

[wreedMH]

So it looks like the root renewed for 10 years but not the machine or vsphere-client certificate. It did for 2 years. Anyway to renew those 2 for 10 years?

[Raudi]

I'm just searching the same, but the other direction, because what happens in a few months, when Chrome reports certificate errors when a certificate is created after september 1st and is valid longer than 398 days?

ESXi host certificates are created with a 5 year certificate, this i can configure:

vpxd.certmgmt.certs.daysValid

But the machine certificate will be issued with 2 years, here i didn't found a way to configure this.