This article explains how to rotate certificates in Pivotal Platform, including the Ops Manager root CA, BOSH NATS CA, leaf certificates, Non-Configurable and Configurable Certificates. There are different rotation procedures for each type of certificate that requires rotation.
You can determine which rotation procedure to follow based on the types of certificates in your foundation that must be rotated.
After identifying the types of certificates that will expire soon, determine which certificate rotation procedure to follow depending on your version of VMware Tanzu Application Service (TAS) for VMs.
See the instructions for each version below: