Renewing expired NSX LB certificates in UI.

Products

• VMware NSX

Issue/Introduction

This article explains on how to renew expired or about to expire certificates on NSX load balancer from UI.

Environment

VMware NSX-T Data Center
VMware NSX

This is only for NSX LB and does not apply for AVI load balancer.

Resolution

To renew the service certificate, first you need to obtain the certificate and key 

On the NSX UI, navigate to System -> Certificates -> Import -> Certificate

A popup dialog box will open to key in the certificate details.

Enter all the required details such as name, certificate & private key.

For certificate copy contents from —–BEGIN CERTIFICATE—–  to  —–END CERTIFICATE—–

The same applies for private key as well.

Once the certificate is imported, you will be able to see it under the "Certificates" tab.

 

Next, you need to navigate to Networking -> Load Balancing -> Virtual Servers -> edit the virtual server for which the certificate needs to be replaced.



Click on "Configure" next to the "SSL Configuration"




You need to select the certificate from the drop down to apply the new renewed certificate for LB and click on "SAVE"








The Virtual server will start using the client and server certificate as applied.