How to Import vCenter SSL Certificate on VxRail Manager Using cert_util.py Script

 After replacing vCenter SSL self-signed certificate, it's necessary to run the following script file to import the new certificate on VxRail manager.

In this post I will show you a step by step guide on how to use the script to update your certificates on VxRail manager.

Step 1: Download the Required Script

• Go to this Dell Support article and download the "cert_util_pkb.zip" file.

Step 2: Upload the Script to VxRail Manager

• Open your FTP client (e.g., WinSCP).
• Log in to VxRail Manager using "mystic" account with default password "Passw0rd!".
• Navigate to the "/tmp" directory.
• Upload the cert_util_pkb.zip file to this location.

Step 3: Connect to VxRail Manager via SSH

• Use an SSH client (e.g., PuTTY) to log in to VxRail Manager.
• Switch to the root user.
  

  su root{codeBox}

Step 4: Extract the Script

• Navigate to "/tmp" directory:
  

  cd /tmp{codeBox}

• Extract the contents of the cert_util_pkb.zip file:
  

  unzip cert_util_pkb.zip{codeBox}

Step 5: Run the Script

• Run the cert_util.py script:
  

  python cert_util.py{codeBox}

• The script will restart the necessary VxRail services automatically.

Step 6: Wait for the VxRail add-on UI to load

• It may take up to 10 minutes for the add-on UI to be read from vCenter.

This procedure works for VxRail versions 4.5.x, 4.7.x, 7.x, and 8.x.{alertInfo}

Starting from version 7.0.480, VxRail Manager includes the "cert_util.py" script at the location "/mystic/ssl/cert_util.py". For these versions and later, you can directly run the script from this path without needing to download the ZIP file.{alertInfo}

By following these steps, you can import vCenter SSL certificates on VxRail Manager.