Re-trusting WorkSpace ONE (vIDM) After SSL Certificate Replacement in VCF Operations for Networks

Products

• VCF Operations for Networks

Issue/Introduction

After replacing or renewing SSL certificates for VCF Operations for Networks (formerly Aria Operations for Networks), trust between the platform and integrated identity providers, specifically WorkSpace ONE (vIDM), may be interrupted. This article outlines the procedure to successfully re-trust WorkSpace ONE within the VCF Operations for Networks environment following a certificate update.

Environment

• Product: VCF Operations for Networks (Aria Operations for Networks)
• Version: 6.14.0
• Component: VMware Aria Suite Lifecycle
• Integration: WorkSpace ONE (vIDM)

Resolution

Before initiating the following steps, ensure you have a current snapshot of your VMware Aria Suite Lifecycle manager appliance.

Generate and Replace Certificate:

• Navigate to the VMware Aria Suite Lifecycle UI.
• Go to Administration > Home > Certificates > Generate.
• Enter the required certificate details and generate the new certificate.
• Navigate to Administration > Home > Environments > Networks.
• Select Replace Certificate and choose the newly generated certificate from the dropdown menu.
• Run the Pre-check to ensure compatibility.
• Click Finish to apply the changes.
  
  

Re-establish Trust with WorkSpace ONE (vIDM):

• Log in to the VCF Operations for Networks Administration interface.
• Navigate to the Authentication or Identity Providers section.
• Select the configured WorkSpace ONE (vIDM) provider.
• Update the SSL trust anchor by importing the new certificate derived from step 1.
• Validate the connection status to confirm that the handshake between VCF Operations for Networks and WorkSpace ONE is restored.

Additional Information

• For guidance on generating self-signed or custom certificates within the lifecycle manager, refer to the related documentation: Generating Certificates in Aria Suite Lifecycle.
• If trust errors persist after re-importing the certificate, verify the system time synchronization across all integrated nodes.