HCX Manager Appliance Management UI (:9443) TLS/SSL CA Signed Certificate becomes Self-signed when Upgrading to Software Version 4.11.0

Products

• VMware HCX

Issue/Introduction

 

After upgrading to HCX version 4.11.0, HCX Managers configured with TLS/SSL CA-signed certificates will encounter a critical change.
The HCX Manager Appliance Management UI (:9443) will revert to using a self-signed certificate generated by HCX, instead of the previously installed CA-signed certificate.
This change does not affect the standalone HCX Manager UI (:443) or VC Plugin, which continues to use the existing CA-signed certificate post-upgrade.

For HCX Managers that were already using self-signed certificates prior to the upgrade, there is no impact. Both the Appliance Management UI and the standalone HCX Manager UI will continue to use self-signed certificates after the upgrade.

 

Environment

VMware HCX 4.11.0

Resolution

Users relying on CA-signed certificates for the Appliance Management UI must reconfigure the CA-signed certificate on Appliance Management UI (:9443) after the upgrade to HCX 4.11.0.
Please contact Broadcom Support (https://support.broadcom.com) for assistance with importing CA signed certificates for use with the HCX Manager Appliance Management UI (:9443) when upgrading to HCX version 4.11.0.

The issue will be resolved in future HCX versions.