Hi Dani,
In vCenter 6.0, the "Host Certificate Status" alert can still appear even if the certificates are valid, due to a trust mismatch between the host and vCenter. This often happens if the host does not trust the vCenter's root certificate or if the certificate hasn't propagated correctly.
Since you're managing certificates via CLI and have no web access, I recommend restarting the host management agents (services.sh restart
) and reconnecting the host in vCenter. This forces a trust check and often clears the alert if the chain is intact.
Also double-check the /var/lib/vmware/vmca/root.cer
and ensure it matches what's trusted on the host under /etc/vmware/ssl/
.
Andrea
Original Message:
Sent: Feb 23, 2023 02:46 PM
From: DaniSNTI
Subject: Alert ESXi Host Certificate Status
Hello, I would like to ask a question, I have vCenter version 6.0, and recently I am receiving an alert on one of the hosts, saying ESXi Host Certificate Status, looking at the host I can see that the certificate has expired but I cannot renew it, because who manages it is vCenter, executing the image command in vCenter, I get that the certificates are valid until 2026, I don't have web access due to the version, how can I proceed?