This article intends to give a high-level overview of the process of replacing certificate on a vIDM cluster.
Errors are shown about the system failing to start up or not accepting the certificate, for example:
LCMVIDM71092
Failed to trust load balancer's certificate. Ensure load balancer has proper root certificate or provide the root certificate chain as retry param 'vidmLBRootCertificateChain' and try again.
Unable to fetch root/intermediate CA certificates from the certificate chain provided. Failed to trust vIDM load balancer certificate. Retry by providing the root or intermediate CA certificate chain.
VMware Identity Manager 3.3.x
Here is a set of steps for changing cert for a cluster where the LB is provided by NSX-T.
(If your load balancer uses SSL passthrough setting, you should not need to replace any cert in the LB. In this case it comes directly from the nodes)