[VMC] Update certificate used with linked vCenter in Hybrid Linked Mode

Products

• VMware Cloud on AWS
• VMware Cloud on Dell EMC

Issue/Introduction

To provide the steps to update the certificates used by the linked vCenter for HLM.

Symptoms:
Hybrid Linked Mode (HLM) is configured with the vCenter Cloud Gateway (VCGA) or through the SDDC. 
A linked vCenter has an updated or renewed certificate. 
After updating or renewing the certificate, the inventory is no longer loading when accessing through HLM. 
Accessing the vCenter directly shows the inventory. 
There is a message when logging into the configured HLM URL that the vCenter cannot be connected to.

Cause

This is caused by the previous certificate being used by HLM. 
The certificate is not dynamically updated and must be resynced.

Resolution

To update the certificate used by HLM, follow this process:

1. Log into the configured HLM URL with the cloudadmin account or an account with the cloudadmin role. 
2. Navigate to Menu > Administration > Hybrid Cloud > Linked Domains. 
3. In the main window, select the option to "Resync certificate". 
4. When prompted, enter the password for the account or update with new credentials. Note: This is account must be an SSO administrator for the respective vCenter. 
5. After selecting "Resync", log out and then log in with an Active Directory account with access configured within HLM. 

Additional Information

Impact/Risks:
Until the certificate is updated in the HLM configuration, the inventory for the affected vCenter will not load through HLM.