Regenerating a new VMCA Root Certificate and replacing all certificates

Typically a new deployment of vCSA incorporates a VMCA-signed certificate for all its components. In the event that this certificate needs to be replaced/regenerated, perhaps due to expiry, we will need to initiate the process described in this recipe. Here, we shall regenerate the VMCA Root Certificate, replace the local machine SSL certificate, and the local solution user certificates with VMCA-signed certificates.

Getting ready

All the steps in this recipe would be carried out from either an embedded deployment or on a Platform Services Controller (PSC). Ensure that you have the appropriate access credentials to the respective systems. In the following...