STS, VPXD and vmdird services might not retain any custom TLS configuration after Upgrade/Patching

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• VMware vCenter Single Sign-On Security Token Service (STS),vCenter Server Service (VPXD) and VMware Directory Service (vmdird) might not retain any custom TLS configuration after Upgrade/Patching. Instead, TLSv1.0, TLSv1.1 and TLSv1.2 protocols are enabled.
• This is observed in Post Minor update / Post Major upgrade / Migration setups.

Environment

VMware vCenter Server 6.5.x

Resolution

To resolve this issue, use the TLS Configurator utility to restore the required TLS configuration settings as needed. For more information, see Managing TLS Protocol Configuration with the TLS Configurator Utility.