Revert SDDC Manager to using a self-signed certificate

Products

• VMware SDDC Manager / VCF Installer

Issue/Introduction

Currently using custom CA cert for SDDC manager component and want to replace the cert with self-signed (OpenSSL) certificate.

Environment

VCF 5.2.2

Resolution

1. Prepare a Backup

   1. Take a snapshot of the SDDC Manager VM before proceeding.

2. Generate a CSR

   1. In the SDDC Manager UI, navigate to Inventory > Workload Domains > Management Domain.

   2. Select the Certificates tab.

   3. Select the checkbox for the SDDC Manager resource type and click Generate CSRs.

   4. Complete the wizard with the required organizational details and generate the request.

3. Generate and Install Self-Signed Certificate

   1. In the same Certificates tab, select the SDDC Manager resource again.

   2. Click Generate Signed Certificates.

   3. Select OpenSSL from the Certificate Authority drop-down menu.

   4. Click Generate Certificates.

   5. Once generated, select the resource again and click Install Certificates.

4. Verify Access

   1. After the task completes, refresh your browser (or clear the cache) to access the UI using the new self-signed certificate.

Additional Information

For detailed steps on handling UI inaccessibility during this process, refer to KB Sddc manager machine SSL certificate expire, UI not accessible. If you need to perform this for other components like vCenter, see Renewing self signed certificates of vCenter via SDDC manager with Open SSL integration.