How to Replace the Certificate for a VMware VirtualCenter Server

  • Article

Applies To: Virtual Machine Manager 2008, Virtual Machine Manager 2008 R2, Virtual Machine Manager 2008 R2 SP1

If a security certificate for a VMware VirtualCenter server expires, or a self-signed certificate is replaced by a third-party CA Certificate, you must update the configuration in VMware VirtualCenter and in Virtual Machine Manager. The following procedure explains the changes that are required.

To update configurations after a certificate change on a VirtualCenter server

  1. To replace the current VMware VirtualCenter self-signed certificate with a new self-signed or third-party CA certificate in VMware VirtualCenter, follow the instructions in the VMware Infrastructure SDK Developer’s Setup Guide, which is available on the VMware Infrastructure SDK Support and Resource site (https://go.microsoft.com/fwlink/?LinkId=121744).

  2. After replacing the certificate on the VirtualCenter server, run the following Windows PowerShell cmdlets on the VMM server, where VirtMgrServer01.Contoso.com is the FQDN of the VirtualCenter server:

    $Virtman = Get-virtualizationmanager –computername “VirtMgrServer01.Contoso.com”
$Cert = Get-certificate –computername “VirtMgrServer01.Contoso.com”
Set-VirtualizationManager –VirtualizationManager -$VirtMan –Certificate $Cert

    Note

    Security certificates can only be updated from the command line.

See Also

Concepts

Managing a VMware Infrastructure 3 Environment in VMM