Author : Joseph Sciallo
Topic Name : Replace the Root Certificate (Intermediate CA)
Publication Name : Platform Services Controller Administration
Product/Version : VMware vSphere/6.7
Question :
how to Replace VMCA Root Certificate with Custom Signing Certificate and Replace All Certificates with 2 years certifiacte
VMware vCenter Server 6.5 Update 2 Release Notes
The validity period of all certificates issued by VMCA is now set to 2 years.but 6.7U1 VMCA is now set to 10 years
Message was edited by: antony1227
Hi,
I just double checked on 6.5 U2 and 6.7:
So Certificates issued by the VMCA like the Machine_SSL and Host Certificates have now valid for 2 years but the CA it self is valid for 10 Years.
Best Regards,
Benedikt
The easiest way for this should be to replace the VMCA with a Custom SubCA, and change the Advanced vCenter Settings.