https://buildrunrepeat.com/tags/azure/Recent content in Azure on Build. Run. Repeat.HugoenSun, 01 Jan 2023 09:00:00 -0400https://buildrunrepeat.com/posts/replacing-your-vcenter-server-certificate-tkg-needs-to-know-about-it/Sun, 01 Jan 2023 09:00:00 -0400https://buildrunrepeat.com/posts/replacing-your-vcenter-server-certificate-tkg-needs-to-know-about-it/<p>I recently ran into an issue where TKGm had suddenly failed to connect to the vCenter server.</p> <p>The issue turned out to be TLS-related, and I noticed that the vCenter server certificate had been replaced&hellip;</p> <p>Due to the certificate issue, Cluster API components failed to communicate with vSphere, causing cluster reconciliation to fail, among other vSphere-related operations.</p> <p>Since all TKG clusters in the environment were deployed with the <code>VSPHERE_TLS_THUMBPRINT</code> parameter specified, replacing the vCenter certificate breaks the connection to vSphere, as the TLS thumbprint changes as well.</p>