An organization administrator has been tasked with adding a certificate to their organization in VCF...

To add a certificate to an organization in VMware Cloud Foundation (VCF) Automation, the organization administrator must perform the following three required actions:

Answer

Log into the Organization Portal.

Import the private key.

Import the certificate in PEM format.

In VCF Automation 9.0, managing identity and security at the tenant level is performed within the Organization Portal. This portal allows organization administrators to configure tenant-specific settings, including branding and certificates, independently of the provider.

The requirements for adding a certificate involve these key components:

Administrative Interface: While global infrastructure certificates are managed in the Provider Portal, tenant-specific certificates used for securing an organization's internal services or custom domains are added through the Organization Portal.

Certificate Format: Standard practice for these integrations is to use the PEM (Privacy Enhanced Mail) format, which is a base64 encoded text format widely supported for secure exchanges. The DER (Distinguished Encoding Rules) format is binary and typically not the primary requirement for these web-based portal imports.

Security Pair: To establish a valid, secure connection, both the certificate itself and its associated private key must be imported into the organization's identity store. The private key is essential for the decryption process and must be handled securely during the import process.