Replacing certificates in an existing Platform Services Controller 6.0 High Availability configuration

Products

• VMware vCenter Server

Issue/Introduction

This article explains the procedure of replacing the certificates in a Platform Services Controller (PCS) in a High Availability (HA) configuration.

Symptoms:

Environment

VMware vCenter Server Appliance 6.0.x
VMware vCenter Server 6.0.x

Resolution

Replacing the certificates in a Platform Services Controller in a High Availability configuration requires re-running the PSC High Availability procedure.

To rerun the PSC High Availability procedure, see these articles depending on your installation type:

• Configuring Windows PSC 6.0 High Availability for vSphere 6.0 (2113085)
  
• Configuring PSC 6.0 High Availability for vSphere 6.0 using vCenter Server 6.0 Appliance (2113315)
  

If you want to use your organization's trusted Certificate Authority, VMware recommends configuring the VMware Certificate Authority (VMCA) component of each PSC in the PSC HA setup as a Subordinate Certificate Authority. For more information, see Configuring vSphere 6.0 VMware Certificate Authority as a subordinate Certificate Authority (2112016).

Important: Ensure that you also update your Load Balancer with the new certificate that was generated as part of the process.

Additional Information

Configuring the vSphere 6.0 U1 or earlier VMware Certificate Authority as a Subordinate Certificate Authority
Configuring Windows PSC 6.0 High Availability for vSphere 6.0
Configuring PSC 6.0 High Availability for vSphere 6.0 using vCenter Server 6.0 Appliance
既存の Platform Services Controller 6.0 高可用性構成の証明書の置き換え
替换现有 Platform Services Controller 6.0 High Availability 配置中的证书