root@JAYWVC [ ~ ]# /usr/lib/vmware-vmca/bin/certificate-manager
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
| |
| *** Welcome to the vSphere 6.7 Certificate Manager *** |
| |
| -- Select Operation -- |
| |
| 1. Replace Machine SSL certificate with Custom Certificate |
| |
| 2. Replace VMCA Root certificate with Custom Signing |
| Certificate and replace all Certificates |
| |
| 3. Replace Machine SSL certificate with VMCA Certificate |
| |
| 4. Regenerate a new VMCA Root Certificate and |
| replace all certificates |
| |
| 5. Replace Solution user certificates with |
| Custom Certificate |
| |
| 6. Replace Solution user certificates with VMCA certificates |
| |
| 7. Revert last performed operation by re-publishing old |
| certificates |
| |
| 8. Reset all Certificates |
|_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|
Note : Use Ctrl-D to exit.
Option[1 to 8]: 8
Do you wish to generate all certificates using configuration file : Option[Y/N] ? : Y
Please provide valid SSO and VC privileged user credential to perform certificate operations.
Enter username [Administrator@vsphere.local]:
Enter password:
Please configure certool.cfg with proper values before proceeding to next step.
Press Enter key to skip optional parameters or use Default value.
Enter proper value for 'Country' [Default value : US] : CN
Enter proper value for 'Name' [Default value : CA] :
Enter proper value for 'Organization' [Default value : VMware] : JASOLAR
Enter proper value for 'OrgUnit' [Default value : VMware Engineering] : JASOLAR
Enter proper value for 'State' [Default value : California] : YW
Enter proper value for 'Locality' [Default value : Palo Alto] : YW
Enter proper value for 'IPAddress' (Provide comma separated values for multiple IP addresses) [optional] : 172.30.9.100
Enter proper value for 'Email' [Default value : email@acme.com] : yejiaen@jasolar.com
Enter proper value for 'Hostname' (Provide comma separated values for multiple Hostname entries) [Enter valid Fully Qualified Domain Name(FQDN), For Example : example.domain.com] : jaywvc.jasolar.com
Enter proper value for VMCA 'Name' :jaywvc
Continue operation : Option[Y/N] ? : Y
You are going to reset by regenerating Root Certificate and replace all certificates using VMCA
Continue operation : Option[Y/N] ? : Y
Get site nameCompleted [Reset Machine SSL Cert...]
default-site
Lookup all services
Get service default-site:7ac94bba-84d0-42af-8f5c-d4b784a14f60
Don't update service default-site:7ac94bba-84d0-42af-8f5c-d4b784a14f60
Get service default-site:3e5e9894-48de-4ca1-ab2a-0b5e86b41660
Don't update service default-site:3e5e9894-48de-4ca1-ab2a-0b5e86b41660
Get service default-site:97bbcedf-7330-4fce-a08f-e816a27d26d1
Don't update service default-site:97bbcedf-7330-4fce-a08f-e816a27d26d1
Get service 419809db-8cff-4dfa-aeee-6818885d508e
Update service 419809db-8cff-4dfa-aeee-6818885d508e; spec: /tmp/svcspec_042080i8
Get service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.vmware.vShieldManager
Don't update service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.vmware.vShieldManager
Get service e7f67241-e80e-4b3d-8562-6c58f8ce679f
Update service e7f67241-e80e-4b3d-8562-6c58f8ce679f; spec: /tmp/svcspec_48309z56
Get service f2e4dde4-75c2-4f30-9f94-ee4ecfd47ee5
Update service f2e4dde4-75c2-4f30-9f94-ee4ecfd47ee5; spec: /tmp/svcspec_3huhtxlq
Get service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.vmware.nsx.ui.h5
Don't update service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.vmware.nsx.ui.h5
Get service 3408c044-a907-4b17-9b13-a7071dc36688
Update service 3408c044-a907-4b17-9b13-a7071dc36688; spec: /tmp/svcspec_g61b8_j4
Get service 3408c044-a907-4b17-9b13-a7071dc36688_kv
Update service 3408c044-a907-4b17-9b13-a7071dc36688_kv; spec: /tmp/svcspec_h2_38jmk
Get service 8d042289-9100-4e38-9df9-38866307d5e2
Update service 8d042289-9100-4e38-9df9-38866307d5e2; spec: /tmp/svcspec_0gv3eef1
Get service d3d67777-c86e-47ba-b10e-8d1d76557092
Update service d3d67777-c86e-47ba-b10e-8d1d76557092; spec: /tmp/svcspec_pllaazbi
Get service a17a9157-6cea-456e-aaf0-12e36a9aa3d8
Update service a17a9157-6cea-456e-aaf0-12e36a9aa3d8; spec: /tmp/svcspec_31sm_wb_
Get service 62874285-013a-46b4-aa91-f6973a311b6e
Update service 62874285-013a-46b4-aa91-f6973a311b6e; spec: /tmp/svcspec_e2rtsxta
Get service 3408c044-a907-4b17-9b13-a7071dc36688_authz
Update service 3408c044-a907-4b17-9b13-a7071dc36688_authz; spec: /tmp/svcspec_uflxs998
Get service 173762f8-ec5e-45f8-8304-6f662c93b193
Update service 173762f8-ec5e-45f8-8304-6f662c93b193; spec: /tmp/svcspec_6hbzieh4
Get service e7b02945-6100-4a25-b8d6-b5d1798c28b9
Update service e7b02945-6100-4a25-b8d6-b5d1798c28b9; spec: /tmp/svcspec_wh42cm02
Get service 70c2d057-03e9-418b-9914-4972eee700eb
Update service 70c2d057-03e9-418b-9914-4972eee700eb; spec: /tmp/svcspec_oyh0swcm
Get service d3dfbc67-4d76-4563-89eb-634a43421796
Update service d3dfbc67-4d76-4563-89eb-634a43421796; spec: /tmp/svcspec_x8uk4vbr
Get service 57278e78-d4da-443f-8f4f-75a77c72e28e
Update service 57278e78-d4da-443f-8f4f-75a77c72e28e; spec: /tmp/svcspec_5o2rsgp5
Get service 51c867c7-ada7-4cb6-a9c9-4c7877e1af2c
Update service 51c867c7-ada7-4cb6-a9c9-4c7877e1af2c; spec: /tmp/svcspec_6xzk264b
Get service 8c0d8b45-8ac9-4747-8c91-0014f0f9a266
Update service 8c0d8b45-8ac9-4747-8c91-0014f0f9a266; spec: /tmp/svcspec_akz_pd3t
Get service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.vmware.vsphere.client
Don't update service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.vmware.vsphere.client
Get service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.veritas.netbackup.NetBackup_10.1
Don't update service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.veritas.netbackup.NetBackup_10.1
Get service 0dd70e56-6ab6-4934-8de8-3faaa0401e65
Update service 0dd70e56-6ab6-4934-8de8-3faaa0401e65; spec: /tmp/svcspec_7i0m_077
Get service 2b374283-4886-4c8a-a6f7-ed2095c16ada
Update service 2b374283-4886-4c8a-a6f7-ed2095c16ada; spec: /tmp/svcspec_xnhjcofr
Get service 3348eabe-17ce-4cbe-b3e6-1f3ef771238d
Update service 3348eabe-17ce-4cbe-b3e6-1f3ef771238d; spec: /tmp/svcspec_usqwj4nq
Get service 56ee3105-0d70-455f-a0f9-67de44adb0fd
Update service 56ee3105-0d70-455f-a0f9-67de44adb0fd; spec: /tmp/svcspec__dpnjnkw
Get service 4bb20d34-211e-45c1-8296-c1c58c70e203
Update service 4bb20d34-211e-45c1-8296-c1c58c70e203; spec: /tmp/svcspec_imjog__e
Get service 38a27d68-46b7-4e9b-a609-3797311eedf4
Update service 38a27d68-46b7-4e9b-a609-3797311eedf4; spec: /tmp/svcspec_5svljtgr
Get service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c
Update service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c; spec: /tmp/svcspec_glqiz0ms
Get service eb40e206-ff1b-4139-8412-6736d8503e59
Update service eb40e206-ff1b-4139-8412-6736d8503e59; spec: /tmp/svcspec_lnfm2tsi
Get service d582ae75-5b6b-4fe7-ba88-431cc5efa462
Update service d582ae75-5b6b-4fe7-ba88-431cc5efa462; spec: /tmp/svcspec_7ef6pzl1
Get service b7fcba07-e749-4d84-aa4d-4474ef397613
Update service b7fcba07-e749-4d84-aa4d-4474ef397613; spec: /tmp/svcspec_tckj7gyr
Get service 2fd650d0-ce1f-4197-82a4-c7551ddba241
Update service 2fd650d0-ce1f-4197-82a4-c7551ddba241; spec: /tmp/svcspec_5_0iz2_q
Get service a03c6168-fc1e-4bfc-87d9-c42d4af08321
Update service a03c6168-fc1e-4bfc-87d9-c42d4af08321; spec: /tmp/svcspec_mvazg4qy
Get service 12f27efa-14ae-4947-b26d-159c1af7e490
Update service 12f27efa-14ae-4947-b26d-159c1af7e490; spec: /tmp/svcspec_5t6hgrku
Get service ce175b46-926c-4244-8206-bad4c53afe74
Update service ce175b46-926c-4244-8206-bad4c53afe74; spec: /tmp/svcspec_vm8yd2su
Get service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.commvault.vsa
Don't update service 7a4ae1e9-f7d0-4d8f-aebc-b05377c2ec2c_com.commvault.vsa
Updated 31 service(s)
Status : 60% Completed [Reset vpxd-extension Cert...]
2024-11-27T06:29:30.659Z Updating certificate for "com.vmware.vim.eam" extension
2024-11-27T06:29:30.983Z Updating certificate for "com.vmware.rbd" extension
2024-11-27T06:29:31.296Z Updating certificate for "com.vmware.imagebuilder" extension
Reset status : 100% Completed [Reset completed successfully]