Updating External Solutions after replacing the vCenter Server SSL certificate

Products

• VMware vCenter Server
• VMware Aria Suite
• VMware NSX
• VMware Cloud Director

Issue/Introduction

For the customers using the external solutions such as Horizon, NSX, vCloud Director, vRealize Operations,  some additional action might be required for the external solution to run with vCenter Server  after replacing the vCenter Server SSL certificates. Please see Solution section for details.

Resolution

For Horizon connectivity issues after replacing the MACHINE_SSL on vCenter Server:
Connection Server unable to accept vCenter thumbprint with an error "There was an error identifying the validity of the server" (67701)

For NSX connection issues after replacing certificates in vCenter Server:
"Failed to login to vCenter as extension, Cannot complete login due to an incorrect user name or password", ESX Agent Manager (com.vmware.vim.eam) solution user fails to log in after replacing the vCenter Server certificates in vCenter Server 6.x (2112577

After vCenter Server certificate is replaced, compute manager connection is "Down" on NSX UI

 

For vRealize Operations Manager issues after replacing certificatesin vCenter Server:
https://docs.vmware.com/en/VMware-Validated-Design/5.1/sddc-certificate-replacement/GUID-A5D97E52-E912-4B3D-A004-074EAB36053C.html

For vCloud Director issues after replacing certificates in vCenter Server.   
Please refer to "Centralized Management of Certificates from vSphere Resources" section in P.25 in the following link.

https://docs.vmware.com/en/VMware-Cloud-Director/10.1/vcd_security.pdf

Additional Information

CertificateStatusAlarm - There are certificate that expired or about to expire / Certificate Status Change Alarm Triggered on VMware vCenter Server (68171)