The following steps can be used to update the SDDC Manager trust store with the Proxy server certificate.
Note: Take a snapshot of the SDDC Manager VM prior to starting this process.
cat /etc/vmware/vcf/commonsvcs/trusted_certificates.key
Note: You will see output similar to the following:
q_0EZjUI7Z^B7V@2A+
keytool -importcert -alias <aliasname> -file <certificate file> -keystore /etc/vmware/vcf/commonsvcs/trusted_certificates.store --storepass <trust store key>
Notes:
The keystore file is changed from,
/usr/java/jre-vmware/lib/security/cacerts to /etc/alternatives/jre/lib/security/cacerts
a. Import the Proxy certificate into the java trust store:
keytool -importcert -alias <aliasname> -file <certificate file> -keystore /etc/alternatives/jre/lib/security/cacerts --storepass changeit
b. Restart SDDC services with:
/opt/vmware/vcf/operationsmanager/scripts/cli/sddcmanager_restart_services.sh
Notes:
keytool -list -v -keystore /etc/vmware/vcf/commonsvcs/trusted_certificates.store -storepass <trust store key>
Note: Replace <trust store key> with the trusted certificates key value returned in Step 3
7. Issue the following command to restart the SDDC Manager services:
/opt/vmware/vcf/operationsmanager/scripts/cli/sddcmanager_restart_services.sh
Note: Remove the snapshot that was taken prior to starting this procedure.