How to renew vSAN witness host certificate

Products

• VMware vSAN
• VMware vCenter Server 8.0

Issue/Introduction

• vSAN witness host is marked with an alarm stating "ESXi Host Certificate Status" in the vSphere Client. This occurs when the host's SSL certificate is nearing or past its expiration date.

Environment

vCenter 7.x

vCenter 8.x

Resolution

For vSAN witness host certificate renewal, the process is identical to that of a standard ESXi host using the vSphere Client.

How to renew the certificate: https://knowledge.broadcom.com/external/article?articleNumber=374032