How to replace vRealize Automation 8.1(VRA) SSL Certificate via vRealize Suite Lifecycle Manager

This article is purposed for someone who needs to replace their expired SSL Certificate in VRA environment. Actually there are two options to replace the certificate:

  1. You can directly replace the SSL Certificate using this VMWare KB
  2. You can upload via vRealize Suite Lifecycle Manager

In this article, I will explain the tutorial using the second options (via vRealize Suite LIfecycle manager).


  • Make sure we already have the CSR that is already signed by the Certificate Authority
  • Make sure the Certificate Authority already sends you the Private Key and the Intermediate Root CA certificate.

Certificate Preparation

  • Assuming you already have below three files (Private Key, Root CA, Signed CSR). If you don’t have this file, please kindly ask from the Certificate Authority.
  • Create new file with extension “.pem” . In this example, I named the file as VRA.pem.
  • Open that VRA.pem and copy paste the content from above files (Private.key, Root_CA_Bundle.crt, and Your_Signed_Domain.crt) into VRA.pem. Please kindly make sure that you copy and paste sequentially like below picture:
  • After that, save the VRA.pem file.

Upload the certificate into your vRealize Lifecycle Manager

  • Log into your vRealize Lifecycle Manager using local user.
  • Click Locker.
  • Click Certificate.
  • Click Import.
  • Fill the Name, and Browse the certificate (VRA.pem). Leave the Private Key and Certificate Chain empty (this will automatically filled when you import that certificate.
  • After that click Import
  • If the upload process is completed with no error then you will be notified “Your certificate successfully added“.

Assigning the SSL Certificate or Replacing the SSL Certificate into VRA Environment

  • Back to vRealize Lifecycle Manager home.
  • Click Lifecycle Operations.
  • Click Environment.
  • Choose VRA environment.
  • Click View Details
  • Click the “. . . “ button.
  • Click Replace Certificate.
  • Choose the Certificate that you have import from above step then click next until the certificate is OK.
  • After that, vRA services will be restarted and you have to wait a couple of minutes until it is available again.
  • Wait until below Stages are all completed.

Now the newer certificate is successuflly imported into your vRA environment. If you have difficulties and other errors, please kindly comment below.

0 0 votes
Article Rating

We are teams that have the same hobbies in Information Technologies and have experienced in many fields regarding Information Technologies .

Related Articles

Notify of
Inline Feedbacks
View all comments
Would love your thoughts, please comment.x