What is the correct way to replace the certificate on an existing vCenter Server that is part of a vCenter HA
configuration?
A.
Put the vCenter HA in Maintenance mode, replace the certificate, exit Maintenance mode.
B.
Shut down Passive and Witness nodes and replace the certificate on the Active node.
C.
Remove the Passive and Witness nodes, replace the certificate, reconfigure the cluster.
D.
Replace the certificate while all nodes are participating in the cluster.
C
https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.avail.doc/GUID-CDC20BD4-E0CE-45D9-B73B-9AA795DA5FDD.html
Perfect! C
C it is!
C
If you want to use custom certificates, you have to remove the vCenter HA configuration, delete the Passive and Witness nodes, provision the Active node with the custom certificate, and reconfigure the cluster.
c