If any members of your vCloud Director server group are using self-signed SSL certificates, you can upgrade them to signed SSL certificates to obtain a higher level of trust within your cloud.

You can use the cell management tool (CMT) certificates subcommand to upgrade the SSL certificates on a vCloud Director server. See Replacing SSL Certificates for details.

Each vCloud Director server requires two SSL certificates, one for each of its IP addresses, in a Java keystore file. You must run the CMT utility for each member of your vCloud Director server group. You can use signed certificates (signed by a trusted certification authority) or self-signed certificates. Signed certificates provide the highest level of trust.