Introduction
This article contains information about how to renew certificates in Microsoft System Center 2012 R2 Virtual Machine Manager (VMM) by using the certificates renewal utility.
This utility enables you to renew the following:
-
Expired certificates
-
Certificates that are about to expire. In this case, you can proactively avoid the downtime of the VMM server that can occur when certificates expire.
How to get and install the renew certificates utility
Before you install the utility
-
Install Update Rollup 14 for System Center 2012 R2 Virtual Machine Manager on the standalone VMM server or the Highly Available VMM cluster.
-
Download the utiltiy from the Microsoft Download Center.
-
Extract the "SCVMM_2012_R2_RENEW_CERT.EXE" file to a temporary location. The following files are extracted.
Filename
File version
File size
Vmmcertutil.exe
3.2.8457.0
68,432
Software Update Supplemental Notice for System Center 2012 R2 Virtual Machine Manager.rtf
Not applicable
86,581
Install the utility on a standalone VMM server
-
Run the Vmmcertutil.exe file. Read and accept the license agreement.
-
Enter the location into which you want to put the extracted files. For example, enter the \bin folder path of the VMM installation. By default, the VMM installation is located in the following folder:
C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager\bin
-
After the files are extracted, open an elevated Command Prompt window. Type the following command, and then press Enter:
"%VMMINSTALLPATH%\bin\vmmcertutil.exe" console Renewvmmnodecertificate
Note In this command, replace the <%VMMINSTALLPATH%> placeholder by using the VMM installation folder path. -
If you have any existing PXE servers in your VMM environment, update the PXE image. To do this in the VMM console, right-click the PXE server, and then click Update WinPE Image.
After you update the certificates, you can delete the Vmmcertutil.exe file from the \bin folder.
Install the update on Highly Available (HA) VMM cluster nodes
-
Copy the Vmmcertutil.exe file to the VMM bin folder (%VMMINSTALLPATH%\bin) on all the HAVMM cluster nodes.
Note: The <%VMMINSTALLPATH%> placeholder represents the installation folder for System Center 2012 R2 Virtual Machine Manager. For example, the installation folder is as follows:
C:\Program Files\Microsoft System Center 2012 R2\Virtual Machine Manager -
Go to the HAVMM active node, log on to the node by using the VMM service account (the account under which VMM is running). You can also use any other account that has the required permissions on the HAVMM cluster and VMM SQL server.
-
On the active node, open an elevated Command Prompt window. Type the following commands, and press Enter after each command:
"%VMMINSTALLPATH%\bin\vmmcertutil.exe" console Renewvmmnodecertificate
"%VMMINSTALLPATH%\bin\vmmcertutil.exe" console RenewHavmmRoleCertificate
-
Go to the passive nodes, and log on to the node by using the VMM service account (the account under which VMM is running). You can also use any other account that has the required permissions on the HAVMM cluster and VMM SQL Server. At an elevated command prompt, type the following commands, and press Enter after each command:
"%VMMINSTALLPATH%\bin\vmmcertutil.exe" console RenewVmmNodeCertificate
“%VMMINSTALLPATH% \bin\vmmcertutil.exe" console UpdateHavmmRoleCertificate
-
After all the passive nodes are updated, perform failover to any passive node.
-
If there are any existing PXE servers in VMM, update the Windows PE image. To update the Windows PE image from the VMM console, right-click the PXE server, and then click Update WinPE Image.
After you update the certificates, you can delete the Vmmcertutil.exe file from all HAVMM cluster nodes.
