Default vIDM tenant not applying new certificate following cert change using Aria Suite Lifecycle

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• In a clustered vIDM instance, certificates were replaced using the 'Replace Certificate' option in Aria Suite Lifecycle.
• After the request is successful, the default tenant is still using the old certificate.
• Checking individual nodes via 8443, the new certificates are present.
• A NSX load balancer is in use.

 

Environment

VMware Identity Manager 3.3.7

VMware Aria Suite Lifecycle 8.18

Cause

The 'Replace Certificates' task in Aria Suite Lifecycle does not update the load balancer certificates.

Resolution

Follow the process outlined in the KB linked below to replace the certificate for an NSX load balancer.

• How to replace a vIDM cluster load balancer certificate in NSX-T and update Aria Suite Lifecycle

Additional Information

If a load balancer from a different provider, please check the appropriate documentation to replace the certificate.