HXDP 5.0(2a) - HX Connect - Replace Self Signed Certificate

[Tim Walker]

Hi all. 

Very simple question, I am getting mixed messages about the above? I can't see any where from the GUI or CLI commands to replace the HX Connect self-signed certificate with a customer signed one? Has anyone done it, or knows if it can be done? I can't believe Cisco won't let you replace this?

This link just talks about ESXi and vCenter?https://www.cisco.com/c/en/us/td/docs/hyperconverged_systems/HyperFlex_HX_DataPlatformSoftware/AdminGuide/5-0/b-hxdp-admin-guide-5-0/m_hxdp_cluster_manage.html

This one makes no mention of replacing certificates with 3rd party from the CLI?

https://www.cisco.com/c/en/us/td/docs/hyperconverged_systems/HyperFlex_HX_DataPlatformSoftware/CLIGuide/5-0/b-hx-cli-reference-guide-5-0/m-hxcli-ch-map.html 

[Kirk J · Accepted solution]

Appendex F of https://www.cisco.com/c/dam/en/us/support/docs/hyperconverged-infrastructure/hyperflex-hx-data-platform/HX-Hardening_Guide.pdf goes over the process

Kirk...

[Riaan van Niekerk]

As an alternative to the PDF-based hardening guide, there is Replace Self-Signed SSL Certificates in Hyperflex Clusters in Configuration Examples and TechNotes (I find HTML-based documentation easier to work with)