Update Local Manager Certificate Thumbprint in
Global Manager Cluster
After you rotate the Local Manager certificates using SDDC Manager, you obtain the new
certificate thumbprint to update it in the Global Manager cluster.
- In a web browser, log in to Global Manager at https://nsx_gm_vip_fqdn/).
- Obtain certificate thumbprint.
- Log in to a vCenter Server by using a Secure Shell (SSH) client.
- Run theshellcommand to switch to the bash shell.
- Run the command to retrieve the SHA-256 thumbprint of the virtual IP for the NSX Manager cluster certificate.echo -n | openssl s_client -connectnsx_lm_vip_fqdn:443 2>/dev/null | openssl x509 -noout -fingerprint -sha256
- Save the thumbprint value.
- Update the Local Manager certificate thumbprint in the Global Manager.
- On the main navigation bar, clickSystem.
- In the navigation pane, selectLocation Manager.
- UnderLocations, select the Local Manager instance, and clickActions.
- ClickEdit Settingsand update NSX Local Manager Certificate Thumbprint.
- ClickCheck Compatibilityand clickSave.
- Wait for the Sync Status to display success and verify that all Local Manager nodes appear.
- Under Locations, update the Local Manager certificate thumbprint for all the instances.