VMware vCenter

 View Only
  • 1.  Alert ESXi Host Certificate Status

    Posted Feb 23, 2023 02:47 PM

    Hello, I would like to ask a question, I have vCenter version 6.0, and recently I am receiving an alert on one of the hosts, saying ESXi Host Certificate Status, looking at the host I can see that the certificate has expired but I cannot renew it, because who manages it is vCenter, executing the image command in vCenter, I get that the certificates are valid until 2026, I don't have web access due to the version, how can I proceed?



  • 2.  RE: Alert ESXi Host Certificate Status

    Posted Jul 10, 2025 09:31 AM

    Hi Dani,

    In vCenter 6.0, the "Host Certificate Status" alert can still appear even if the certificates are valid, due to a trust mismatch between the host and vCenter. This often happens if the host does not trust the vCenter's root certificate or if the certificate hasn't propagated correctly.

    Since you're managing certificates via CLI and have no web access, I recommend restarting the host management agents (services.sh restart) and reconnecting the host in vCenter. This forces a trust check and often clears the alert if the chain is intact.

    Also double-check the /var/lib/vmware/vmca/root.cer and ensure it matches what's trusted on the host under /etc/vmware/ssl/.

    Andrea