Replacing all certificates with custom certificate

As previously discussed, if for specific reasons an external CA needs to be used in the environment, we would need to obtain the appropriate certificate and replace it across the components in the vSphere environment. In the following recipe, we replace the machine SSL certificate with the one obtained from the CA.

Getting ready

A prerequisite for replacing the certificate is to ensure that you have created the CSRs and sent it to the CA to obtain the signed certificates. You would require the following:

• A valid machine SSL custom certificate (*.crt file)
• A valid machine SSL custom key (*.key file)
• A valid signing certificate for the custom machine certificate

...