Impact for NSX Native LoadBalancer/Virtual Servers when replacing NSX Manager Certificates in SDDC

Products

• VMware SDDC Manager / VCF Installer
• VMware NSX

Issue/Introduction

• Replacing NSX Manager Certificates from CA to Third-Party in SDDC
• The certificates from Third-Party are in use for NSX Native LoadBalancer/Virtual Servers
• LoadBalancer/Virtual Servers should be using NSX service certificates
• Is there any impact to LoadBalancer/Virtual Servers when replacing NSX Manager Certificates

Environment

VMware SDDC Manager

VMware NSX

Cause

NSX service certificates are user-facing for services such as load balancer, VPN, and TLS Inspection.

The policy API manages service certificates. Non-service certificates are used by the platform for tasks such as cluster management. The management plane (MP) or truststore APIs manage non-service certificates.

Resolution

There is no impact for LoadBalancer/Virtual Servers when replacing NSX Manager appliance certificates.

Additional Information

For more information on the different types of certificates in NSX, please refer the article: Types of Certificates