Install Microsoft CA-Signed Certificates using SDDC Manager

Replace the self-signed certificates with signed certificates from the Microsoft Certificate Authority by using SDDC Manager.
  1. In the navigation pane, click
    Inventory
    Workload Domains
    .
  2. On the
    Workload Domains
    page, from the table, in the domain column click the workload domain you want to view.
  3. On the domain summary page, click the
    Certificates
    tab.
  4. Generate CSR files for the target components.
    1. From the table, select the check box for the resource type for which you want to generate a CSR.
    2. Click
      Generate CSRs
      .
    3. On the
      Details
      dialog, configure the settings and click
      Next
      .
      Option
      Description
      Algorithm
      Select the key algorithm for the certificate.
      Key Size
      Select the key size (2048 bit, 3072 bit, or 4096 bit) from the drop-down menu.
      Email
      Optionally, enter a contact email address.
      Organizational Unit
      Use this field to differentiate between divisions within your organization with which this certificate is associated.
      Organization Name
      Type the name under which your company is known. The listed organization must be the legal registrant of the domain name in the certificate request.
      Locality
      Type the city or locality where your company is legally registered.
      State
      Type the full name (do not abbreviate) of the state, province, region, or territory where your company is legally registered.
      Country
      Type the country name where your company is legally registered. This value must use the ISO 3166 country code.
    4. (Optional) On the
      Subject Alternative Name
      dialog, enter the subject alternative name(s) and click
      Next
      .
    5. On the
      Summary
      dialog, click
      Generate CSRs
      .
  5. Generate signed certificates for each component.
    1. From the table, select the check box for the resource type for which you want to generate a signed certificate for.
    2. Click
      Generate Signed Certificates
      .
    3. In the
      Generate Certificates
      dialog box, from the
      Select Certificate Authority
      drop-down menu, select
      Microsoft
      .
    4. Click
      Generate Certificates
      .
  6. Install the generated signed certificates for each component.
    1. From the table, select the check box for the resource type for which you want to install a signed certificate.
    2. Click
      Install Certificates
      .