Unable to add Microsoft CA to VCF Operations 9.x

Products

• VCF Operations

Issue/Introduction

Unable to add Microsoft CA to VCF Operations due to a certificate issue where VCF Operations 9 requires that the CA have a valid Subject Alternative Name (SAN)

 

Environment

VCF Operations 9.x

Resolution

Generate a new certificate to be used with VCF Operations:

VCF Operations 9 requires a certificate with the SAN (Subject Alternative Name) field populated with the FQDN of the CA server

• Follow Microsoft documentation for requesting an advanced certificate with  certificate https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/request-certificate-windows-server

• After obtaining the new certificate, you can now use the certificate for the CA website (typically the default website) by following https://learn.microsoft.com/en-us/dotnet/framework/wcf/samples/iis-server-certificate-installation-instructions 
  
  Now you should be able to follow Configure a Certificate Authority for VMware Cloud Foundation to add the CA to VCF Operations.