Verification of retainVasaProviderCertificate flag in vCenter Server 8.0

Products

• VMware vCenter Server 8.0

Issue/Introduction

 This article will guide on how to check with a retainVasaProviderCertificate flag via sms/mob browser.

Environment

vCenter Server 8.0

Resolution

To check the retainVasaProviderCertificate flag using the vCenter Storage Management Service (SMS) Managed Object Browser (MOB),

1. Open a web browser and access the following URL:
   
   https://<vCenter FQDN or IP>/sms/mob
   Note: Access the /sms/mob path, and not the standard <vCenter FQDN or IP>/mob.
   
   
2. Log in using vCenter Server administrator credentials (e.g., [e-mail]).
   
   
3. Navigate to: QueryStorageManager > Invoke Method > storageManager > QueryProvider > Invoke Method.
   
   
4. Click on displayed vasaProvider-##, and then proceed to QueryProviderInfo > Invoke Method.
   
   
5. In the property list on the SmsProviderInfo QueryProviderInfo page, locate retainVasaProviderCertificate and check whether its value is true or false.
   
   
   
   
6. If it is not the information for the target VASA provider, repeat steps 4 and 5 above.

 

Additional Information

• Impact of the retainVasaProviderCertificate flag
  The setting of this flag determines how certificates are managed:
  
  • False: vCenter's Storage Policy Based Management (SPBM) provisions VMCA-signed certificates and handles auto-renewal.
  • True: The VASA Provider manages its own certificate; vCenter Server establishes trust but does not handle the lifecycle or renewal.
    Note: The True or False value of this flag cannot be changed from vCenter Server. Change the certificate settings directly on the storage array system, then sync or re-register the VASA Provider in vCenter Server. Please refer to your storage vendor for specific configuration steps.
    
    
• SMS self-signed certificates
• Alert "The certificate of the vVol VASA Provider registered to vCenter has expired or is nearing expiration" in VMware Cloud Foundation Operations
  
  
  
• vCenter Server 8.0 における retainVasaProviderCertificate フラグの確認