Perform a reset of the STS certificate and perform a trustfix on the vCenter server

Request you to perform a reset of the STS certificate and perform a trustfix on the vCenter server.

The activity should take less than an hour to complete and would require restart of services across all vCenter servers. 

This should not impact any of the virtual machines in the environment.

Note:
Request you to take powered off snapshots of the vCenter/ all nodes in linked mode, prior to making any changes.

Firstly, request you to run trust fix with the LS doctor utility.
    • Download the LS doctor tool from the below URL .

        https://kb.vmware.com/s/article/80469

    • Place the LS doctor tool in the /tmp folder of the vCenter server using scp clients.
        Note : If you are denied access when connecting the scp cliant, execute the below command and open a new session.
        #chsh -s /bin/bash
    • Run the bellow commands in sequence.

1.  cd /tmp/
2. unzip lsdoctor.zip
3. cd /tmp/lsdoctor-master
4. python lsdoctor.py -l

    • Run trust fix and stale fix accordingly as suggested from the previous output.

1. Trustfix : python lsdoctor.py -t
2. Stalefix : python lsdoctor.py -t

         
Reference:
https://kb.vmware.com/s/article/80469

Secondly, to renew the STS please follow the below KB.
https://kb.vmware.com/s/article/76719