VMware Cloud Community
antony1227
Contributor
Contributor

VMCA Root Certificate 2 years

Author : Joseph Sciallo

URL : http:////docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.psc.doc/GUID-13F5BA59-0422-4BCF-BA39-3C898...

Topic Name : Replace the Root Certificate (Intermediate CA)

Publication Name : Platform Services Controller Administration

Product/Version : VMware vSphere/6.7

Question :

how to Replace VMCA Root Certificate with Custom Signing Certificate and Replace All Certificates  with 2 years certifiacte

VMware vCenter Server 6.5 Update 2 Release Notes

The validity period of all certificates issued by VMCA is now set to 2 years.but 6.7U1 VMCA is now set to 10 years

Message was edited by: antony1227

Tags (1)
Reply
0 Kudos
3 Replies
BenediktFrenzel
VMware Employee
VMware Employee

Hi,

I just double checked on 6.5 U2 and 6.7:

So Certificates issued by the VMCA like the Machine_SSL and Host Certificates have now valid for 2 years but the CA it self is valid for 10 Years.

Best Regards,

Benedikt

Reply
0 Kudos
antony1227
Contributor
Contributor

HI:

I Wish to Regenerate CA it self is valid for 2 Years.

Reply
0 Kudos
BenediktFrenzel
VMware Employee
VMware Employee

The easiest way for this should be to replace the VMCA with a Custom SubCA, and change the Advanced vCenter Settings.pastedImage_0.png

Reply
0 Kudos