The following steps will help you to renew ESXi certificates with VMCA issued certificates:
- Connect to vCenter Server using the HTML5 Client.
- Use the key combination Ctrl + Alt + 2 to switch to the Hosts and Clusters view.
- This is an optional step to select the vCenter service you want to use to manage the host. Then, navigate to Configure | Advanced Settings.
- This is an optional step to Edit Advanced vCenter Settings and modify the certificate configuration values:
- Right-click on the desired ESXi host and navigate to Certificates | Renew Certificate:
Renew Certificate option
- You will be prompted to confirm the operation. Click Yes to do so:
- You should see a Refresh the subject certificate on the host task completed successfully in the Recent Tasks pane.
- Restart the management services on the host by issuing the /usr/sbin/services.sh restart command.
- The host's Configure | System | Certificate section should now display the new certificate's details:
This completes the process of renewing VMCA issued ESXi certificates.
You can generate self-signed certificates directly from the ESXi host by running the /sbin/generate-certificates command.