Default VMCA certificate auto-renewal period shows 730 days

Products

• VCF Operations/Automation (formerly VMware Aria Suite)
• VMware Cloud Foundation

Issue/Introduction

Renewal period for default VMCA certificates extends the certificate validity to 730 days in VCF Operations for certificates: 

Environment

VMware Cloud Foundation 9.x

VCF Operations 9.x

Resolution

• When using a custom certificate, once the CSR is generated, the certificate validity should be able to be specified to be a shorter or longer validity. 
• When using OpenSSL the certificate renewed will extend the validity period by 397 days.
• For the default VMCA certificate this is a known issue that engineering is aware of. In later versions of 9, the validity should be improved to be no greater the 397 days.