1. Install and configure the certificate authority. Prerequisite: Active Directory Certificate Service needs to be installed on Windows Server 2016 or 2019 version (other versions have not been tested) and the computer needs to be added to the domain. If you do not have the corresponding environment, please refer to the NSX self-signed certificate...

Brief description: As shown in the figure above, there will be three types of certificates in this environment that are about to expire and need to be replaced: 1. NSX Manager cluster/VIP (mp-cluster) certificate - used with the cluster virtual IP, one for each cluster Certificate; for use with global managers or local managers...