vNinja

The following instructions will walk you through replacing an ADFS cert in vSphere
1. Log into the VAMI UI for the vShere environment
https://[vSphere FQDN]:5480
2. Go to Access and click Edit
3. Enable SSH
4. Open WinSCP and connect to the vCenter server
5. On the left pane browse to where the new certificate is located on the network
6. On the right pan browse to /tmp/ and upload the certificate into this directory
7. Open Putty and SSH into the vCenter server
8. Run the following commands:
cd /tmp
/usr/lib/vmware-vmafd/bin/dir-cli trustedcert publish –cert <CertNameHere>
Enter the admin creds to complete the upload
if needed, run this command to see the trusted certs
/usr/lib/vmware-vmafd/bin/dir-cli trustedcert list
9. Log into the vSphere UI with local admin creds
10. Go to Administration > Single Sign On > Configuration
11. Click on ‘Change Identity Provider’ at the top-right corner
12. Keep ‘Microsoft ADFS’ selected and click Next
13. *Only do this step if you do not have the secret
a. log into your ADFS server
b. Open ADFS Management
c. Go to ‘Application Groups’
d. Double-click on ‘VMware vSphere’
e. Select the vCenter server application and click Edit
f. Click on the ‘Confidential’ tab
g. Click on ‘Reset client secret’
h. Record the secret
i. Click OK and click OK to exit
14. Enter the shared secret and click Next
15. Enter the password for your service account
16. Click on ‘Browse’ to upload a certificate
17. Browse to and select the new certificate
18. Click Next
19. Click Finish