VxRail Management certificate shows expired in SDDC manager

Products

• VMware Cloud Foundation 4.x
• VMware Cloud Foundation
• VMware Cloud Foundation 5.x

Issue/Introduction

•  After updating the certificate of VXRail manager in SDDC Manager . The VXRail certificate status shows expired 

Environment

Vmware Cloud Foundation 4.x

Vmware Cloud Foundation 5.x

Cause

Cause :

This issue occurs due to the certificate unable to sync from the vCenter . 

Resolution

Note : If the certificate unable to renew from the SDDC Manager UI , then you can follow the below steps. 

Steps to Renew the Certificate for VXRail Management in vCenter if the certificate expired .

1. Login to the SDDC Manager UI
   • Generate the CSR for VXRail manager from the SDDC UI and download. 
   • Contact Dell and renew the VXRail certificate and update on the vCenter.
2. Using SDDC Manager key tool update the certificate in SDDC manager. Refer the following article .
   
   How to add/delete Custom CA Certificates to SDDC Manager and Common Services trust stores
3. Login to the SDDC Manager UI
   • Click on the Workload domain.
   • Click on the domain , where you want to change the certificate.
   • Click on certificate 
   • Click on the check box for the VXRail Management.
   • Click on upload and install the certificate.
   • Upload the same certificate to the SDDC Manager UI stated in step 3. 
4. Run the below command for the inventory sync in the SDDC Manager.
   
   

   curl -X GET http://localhost/inventory/vcfservices | json_pp