Monday 24 February 2020

Replacing machine ssl certificates with custom certificates on VCSA 6.7 failed

Replacing machine ssl certificates with custom certificates on VCSA 6.7 failed

Description:
We have vcsa 6.7 deployed and vcsa HA configured. Active node runs in site A, whereas passive and witness node runs on site B. When we try to replace machine ssl certificate with custom cert, it got failed while trying to update cert on passive node

Resolution:
Replacing certificate on HA enabled vcsa cluster is not supported

The solution is to destroy vcsa HA first and then replace machine ssl certificate. Once done, enable VCSA HA and then complete the HA configuration.


No comments:

Post a Comment