Tanzu Cloud Console SAML certificate rotation

Products

• VMware Tanzu Platform
• VMware SDDC Manager
• VMware Tanzu Mission Control

Issue/Introduction

Customers may have SAML enabled for their Tanzu-CSP Cloud Console (https://console.tanzu.broadcom.com) to access Tanzu Application Catalog (TAC), Tanzu Mission Control (TMC), Tanzu Service Mesh (TSM) and other applications.  This requires a SAML signing certificate, which may either be provided via a SAML Metadata URL or by configuring the certificate directly on the Tanzu Cloud Services backend.

NOTE: https://csp-console.broadcom.com is used for VCF cloud services.

Resolution

Open a Support case under the product you access via the Tanzu portal and provide the following information:

1. Customer tenant number
2. Organization ID for Tanzu-CSP Cloud Services account. 
3. Broadcom URL to SAML metadata
4. Customer internal URL to SAML metadata

Attach new certificate to the case.