Impact of the conversion to VCF 9.x in environments where certificates are not converged

Products

• VMware NSX
• VMware Cloud Foundation

Issue/Introduction

When converging an existing VMware NSX 4.2 environment to VMware Cloud Foundation 9.x, users may notice differences in certificate structures:

• Fresh NSX 4.2 Installations:
   Certificates for APH, APH_TN, and CCP are consolidated into a single certificate per node (3 certificates per node instead of 9).
• Upgraded Environments from NSX 4.1 or earlier:
   Certificates are not automatically consolidated and remain as separate entities.

There is a concern regarding whether these separate (unconverged) certificates will cause operational issues after convergence to VCF 9.1.

Environment

VMware NSX 4.x
VMware Cloud Foundation 9.x

Resolution

There is no functional impact on the convergence process to VCF 9.1 or subsequent VCF operations whether NSX certificates are consolidated or separate. The system behaves identically in both configurations.

Additional Information

For more information on certificate types, refer to the NSX 4.2 Administration Guide.