2.5

Table Of Contents
Edit Management Server Certificate
System administrators can edit a custom Management Server SSL key and certificate to replace the certiticate
before it expires.
Prerequisites
Verify that a custom key and certificate is applied to the Management Server.
Procedure
1 Click System Settings.
2 Expand Other Settings and click Security.
3 Under SSL Configuration, right-click Management Server and select Edit Certificate.
A warning advises you to restart the management server after applying a new key. Any operations after
you change the key can put the Management Server in an inconsistent state.
4 Click OK.
5 (Optional) Use the Upload, Delete, down and up buttons to edit the certificate chain.
6 Click OK.
Progress of the custom certificate configuration for the Management Server and of tasks that distribute
the Management Server root CA to the DBVMs, appears in the right panel.
The new certificate is applied.
Regenerate DB Name Server Key and Certificate
System administrators can regenerate the DB Name Server SSL key and certificate before it expires, to ensure
continuous security of communications.
Prerequisites
Verify that no custom key and certificate has ever been applied to the DB Name Server.
Procedure
1 Click the System Settings tab.
2 Expand Other Settings and click Security.
3 Right-click DB Name Server and select Regenerate.
A warning advises you that the DB name server will restart after the new key assignment finishes.
4 Click OK.
Progress of renewal of the automatically generated key and certificate for the DB Name Server, and of
tasks that distribute the DB Name Server root certificate authority (CA) to the DBVMs, appears in the right
panel.
A new key and certificate, valid for five years, is generated.
Chapter 18 Managing SSL Keys and Certificates
VMware, Inc. 183