Import custom certificate and key pair into Supervisor cluster in vSphere with Tanzu
search cancel

Import custom certificate and key pair into Supervisor cluster in vSphere with Tanzu

book

Article ID: 373043

calendar_today

Updated On:

Products

VMware vSphere Kubernetes Service vSphere with Tanzu VMware Tanzu Kubernetes Grid Service (TKGs)

Issue/Introduction

Symptoms/Requirement: 

  •     User doesn't want to generate CSR from vSphere (Workload Management>Supervisor>Certificates>Generate CSR)   
  •     User wants to import custom certificates and the private key pair on the VIP/Supervisor cluster.

 

Cause

Currently, the vSphere UI lacks the functionality to upload a custom certificate and its private key pair to a Supervisor cluster. Additionally, the process of generating a certificate and private key outside of the vCenter server, and then supplying both the certificate and key to Supervisor is not supported.

It is only possible to import the certificate file into the Supervisor cluster, and not the key file.

Resolution

Importing a custom certificate along with its key pair is currently not supported. However, our engineering team is actively working on implementing this feature, which will provide customers with the option to import both the custom certificate and its key pair. This functionality is expected to be available in VCF 9.0.