Prerequisites
You must be a Trust Authority administrator.
Procedure
- Perform the following steps on the vSphere Trust Authority Cluster.
- In a PowerCLI session, run the Connect-VIServer cmdlet to connect to the vCenter Server of the Trust Authority Cluster using the Trust Authority administrator user.
Connect-VIServer -server ###.###.###.### -User <admin username> -Password <admin password>
- Assign the Trust Authority Cluster to a variable.
$TAcluster = Get-TrustAuthorityCluster "SB-Cluster"
- Export the TrustAuthorityServicesInfo information so that you have the latest version. Ensure that the destination directory exists before running this command.
Export-TrustAuthorityServicesInfo -TrustAuthorityCluster $TAcluster -FilePath C:\<local directory>\cluster_settings_new.json
- Perform the following steps on the Trusted Cluster.
- Run the following commands to disconnect any current connection and connect to the vCenter Server of the Trusted Cluster using the Trust Authority administrator user.
Disconnect-VIServer -server * -Confirm:$false
Connect-VIServer -server ###.###.###.### -User <admin username> -Password <admin password>
- Assign the Trusted Cluster to a variable.
$TrustedCluster = Get-TrustedCluster "SA-Cluster"
- Disable the Trusted State of the Trusted Cluster.
Set-TrustedCluster -State Disabled -TrustedCluster $TrustedCluster
- Remove the AttestationServiceInfo desired state information from vCenter.
Get-AttestationServiceInfo| Remove-AttestationServiceInfo
- Remove the KeyProviderServiceInfo desired state information from vCenter.
Get-KeyProviderServiceInfo| Remove-KeyProviderServiceInfo
- Import the TrustAuthorityServicesInfo information into vCenter that you previously exported in step 1c.
Import-TrustAuthorityServicesInfo -FilePath C:\<local directory>\cluster_settings_new.json
- Enable the Trusted State of the Trusted Cluster.
Set-TrustedCluster -State Enabled -TrustedCluster $TrustedCluster