After the virtual appliance certificates are updated, the system administrator updates the IaaS server running the Model Manager Data component registry to reestablish trusted communications between the virtual appliances and IaaS components.

Execute the vcac-Config.exe command with the UpdateServerCertificates argument to update the IaaS database with the certificate information.

Type the following command for a list of vcac-Config arguments.

vcac-Config.exe help


Open a command prompt as an administrator and navigate to the Cafe directory on the Model Manager Data installation machine.

C:\Program Files (x86)\VMware\vCAC\Server\Model Manager Data\Cafe


Type the following command to update the IaaS database with the certificate information in one step. Supply the IaaS database name (vcac, by default) and the fully qualified domain name of the database server.

vcac-Config.exe UpdateServerCertificates -d vcac_database -s sql_database_server -v

For example:

vcac-Config.exe UpdateServerCertificates -d vCAC -s tr-w2008-13.eng.mycompany -v


The version of the command shown here, without the thumbprint argument, downloads the certificate in one step.


(Optional) If you use self-signed certificates or certificates signed by a custom certificate authority (CA), verify that the Windows servers that host the Manager Service, DEMs, and IaaS Website trust the new certificate.


(Optional) Add the virtual appliance certificate to the trusted store if it is not trusted and recheck that Windows servers now trust the certificate.


Type iisreset to reset IIS.