SSL Certificate Replacement Procedure for VMware vRealize Operations manager

One of the most important product in monitoring vSphere environment is the VMware vRealize operations manager.

I had to recently replace SSL custom certificates and gathered the below procedure.

Below is the setup ,

• vROPS version 6.6
• 3 Nodes running with VIP in front end using Load balancer.
• Load balancer is configured in NSX-ESG appliance NSXV 6.3.4 with HTTPS passthrough enabled.

Prerequisites:

• Validate that there is a recent backup of vROPS virtual machines are available in the environment.
• Generate a list of fully qualified domain names and their associated IP addresses on this server.
• Gather the VIP address used for the vROPS service.
• Gather all root password of all appliances, admin account of vROPS login.

Execution:

Execution is categorized into three sections as below.

1. Generate a Certificate Signing request and Key pair [ I have used XCA poratble tool to generate and a separate blog page is available for this procedure- Link ]
2. Take the output of XCA tool in PEM format directly.
3. Install a PEM in vRealize Operations Manager 6.x

Install  PEM in vRealize Operations Manager 6.x

• In a Web browser, navigate to the vRealize Operations Manager administration interface.
  • https://<vROPS Virtual IP address>/admin
• Log in with the admin username and password.
• At the upper right, click the yellow SSL Certificate icon.
• In the SSL Certificate window, click Install New Certificate.
• Click Browse for certificate.
• Locate the certificate .pem file and click Open to load the file in the Certificate Information text box.
• The certificate file must contain a valid private key and a valid certificate chain.
• Click Install.