Renew vCenter STS Certificate – Zewwy's Info Tech Talks

Log in with the vSphere Client to the vCenter Server.
Specify the user name and password for administrator@vsphere.local or another member of the vCenter Single Sign-On Administrators group.
If you specified a different domain during installation, log in as administrator@ mydomain.
Navigate to the Certificate Management UI.
1. From the Home menu, select Administration.
2. Under Certificates, click Certificate Management.
If the system prompts you, enter the credentials of your vCenter Server.
Under STS Signing Certificate, click Actions > Refresh with vCenter certificate.

Click Refresh.
The VMCA refreshes the STS signing certificate on this vCenter Server system and on any linked vCenter Server systems.
(Optional) If the Force Refresh button appears, vCenter Single Sign-On has detected a problem. Before clicking Force Refresh, consider the following potential results.
- If all the impacted vCenter Server systems are not running at least vSphere 7.0 Update 3, they do not support the certificate refresh.
- Selecting Force Refresh requires that you restart all vCenter Server systems and can render those systems inoperable until you do so.
1. If you are unsure of the impact, click Cancel and research your environment.
2. If you are sure of the impact, click Force Refresh to proceed with the refresh then manually restart your vCenter Server systems.

I guess my setup had a problem? or it’s still valid or a long time, I don’t know why my setup says force refresh, but lets do it…

Mhmmm… k vCenter still working normally, and no forced reboot, just saying all systems need to be rebooted….

I navigated away and back and it shows the new cert…

reboot anyway… sign in, no issues…

But the old root still exists, can it be deleted?

Yes… Check out how on my next Blog post.