You can configure self-signed service certificates with your edge gateways, to use in the edge gateways' VPN-related capabilities. If the edge gateway for your vCloud Director organization virtual datacenter has been converted to an advanced edge gateway, you can use the Certificates screen in the vCloud Director tenant portal to create, install, and manage self-signed certificates.

When the service certificate is available on the Certificates screen, you can specify that service certificate when you configure the edge gateway's VPN-related settings. The VPN presents the specified service certificate to the clients accessing the VPN.

Verify that at least one CSR is available on the tenant portal's Certificates screen when you open the tenant portal for the edge gateway. See Generate a Certificate Signing Request for an Edge Gateway for information.


Launch the tenant portal using the following steps.


Log in to the vCloud Director Web console and navigate to the edge gateway.


Right-click the name of the edge gateway and click Edge Gateway Services in the context menu.

The tenant portal opens in a new browser tab and displays the Edge Gateway screen for that edge gateway.


Click the Certificates tab.


Select the CSR in the list that you want to use for this self-signed certificate and click SELF-SIGN CSR.


Type the number of days that the self-signed certificate is valid for.


Click Keep.

The system generates the self-signed certificate and adds a new entry with type Service Certificate to the on-screen list.

The self-signed certificate is available on the edge gateway. In the on-screen list, when you select an entry with type Service Certificate, its details are displayed in the screen.