nerdexam
Broadcom-VMware

2V0-622 · Question #154

An administrator has migrated a vCenter Server Appliance from version 5.5 to version 6.x. During the migration, the administrator selected DHCP for the appliance and obtained a hostname from the…

The correct answer is A. Regenerate the SSL certificates. SSL certificates are bound to the appliance hostname and IP address, so changing either after migration invalidates existing certificates and requires regeneration to prevent service failures.

Section 4 – Upgrade vSphere 6.x to vSphere 6.5

Question

An administrator has migrated a vCenter Server Appliance from version 5.5 to version 6.x. During the migration, the administrator selected DHCP for the appliance and obtained a hostname from the DHCP server. The administrator adjusts the hostname after the migration and uses a static IP and hostname. What should the administrator do immediately after this change to prevent service failures?

Options

  • ARegenerate the SSL certificates.
  • BRe-register components to Single Sign-On.
  • CUpdate the /etc/hosts file.
  • DExecute the command services.restart vmware-vpxd.

How the community answered

(30 responses)
  • A
    73% (22)
  • B
    3% (1)
  • C
    17% (5)
  • D
    7% (2)

Why each option

SSL certificates are bound to the appliance hostname and IP address, so changing either after migration invalidates existing certificates and requires regeneration to prevent service failures.

ARegenerate the SSL certificates.Correct

SSL certificates generated during migration are issued to the original hostname obtained via DHCP. When the hostname is changed to a static value, the Subject Name in the certificate no longer matches the appliance identity, causing all vCenter services and components that verify the certificate to fail. Regenerating the SSL certificates ensures they are issued for the new static hostname, restoring secure communication across all services.

BRe-register components to Single Sign-On.

Re-registering components to SSO is not required solely due to a hostname change; the primary cause of service failures after a hostname change is the SSL certificate mismatch, not SSO registration state.

CUpdate the /etc/hosts file.

Updating /etc/hosts addresses local name resolution only and does not resolve the SSL certificate Subject Name mismatch caused by the hostname change.

DExecute the command services.restart vmware-vpxd.

Restarting only the vpxd service does not address the underlying invalid SSL certificates, and other dependent services would still fail to authenticate.

Concept tested: SSL certificate regeneration after hostname or IP change

Source: https://docs.vmware.com/en/VMware-vSphere/6.0/com.vmware.vsphere.security.doc/GUID-0C7B0620-B6DD-4C29-B3D1-5F6BB02C2D25.html

Topics

#SSL certificate regeneration#VCSA migration#hostname change#static IP configuration

Community Discussion

No community discussion yet for this question.

Full 2V0-622 Practice