An ESXi host’s VMCA-Signed certificate has expired. How can the certificate be renewed?
A. In the vSphere Web Client, browse to the host in question. Click the Manage tab and select settings.
Select System and click Certificate, then click the Renew button.
B. In the vSphere Web Client, browse to the host in question.
Click the Manage tab and select settings.
Select System and click Certificate, then click the Refresh CA Certificates button.
C. Run the command /sbin/generate-certificates on the affected host.
D. Disconnect the host from vCenter Server and reconnect it.
D
read carefully: https://docs.vmware.com/en/VMware-vSphere/6.0/com.vmware.vsphere.security.doc/GUID-ECFD1A29-0534-4118-B762-967A113D5CAA.html
About this task
You can renew your certificates when they are about to expire, or if you want to provision the host with a new certificate for other reasons. >>> If the certificate is already expired, you must disconnect the host and reconnect it. <<<
D
You can renew your certificates when they are about to expire, or if you want to provision the host with a new certificate for other reasons. If the certificate is already expired, you must disconnect the host and reconnect it.
By default, vCenter Server renews the certificates of a host with status Expired, Expiring immediately, or Expiring each time the host is added to the inventory, or reconnected.
The answer is A.
Procedure
Browse to the host in the vSphere Web Client inventory.
Click the Manage tab and click Settings.
Select System, and click Certificate.
You can view detailed information about the selected host’s certificate.
Click Renew (Retrieves a fresh signed certificate for the host from VMCA).
I think the main point is that it’s already expired — “If the certificate is already expired, you must disconnect the host and reconnect it.” In this case it would be:
D
Davids Link Shows:
By default, vCenter Server renews the certificates of a host with status Expired, Expiring immediately, or Expiring each time the host is added to the inventory, or reconnected.
@ David how can this be D. Your own link states it should be A.
D
https://docs.vmware.com/en/VMware-vSphere/6.0/com.vmware.vsphere.security.doc/GUID-ECFD1A29-0534-4118-B762-967A113D5CAA.html