Vadim's KB | Все запили отмеченные как 'vCenter'

When you replace the VMware Certificate Authority root certificate with an enterprise subordinate certificate, you experience these symptoms:

The certificate has been valid for less than 24 hours
You are unable to join a VMware vSphere ESXi host to VMware vCenter Server
You see the error:

A general system error occurred: Unable to get signed certificate for host: esxi_hostname. Error: Start Time Error (70034)

This behavior is changed in VMware vCenter 6.0 Update 2 and later with the advanced setting vpxd.certmgmt.certs.minutesBefore, available at VMware Downloads. For more information, see the VMware vCenter Server 6.0 Update 2 release notes.

To change the vpxd.certmgmt.certs.minutesBefore to 10:

Connect to the vCenter Server using the vSphere Client and administrator credentials.
Select Administration > vCenter Server Settings to display the vCenter Server Settings dialog box.
In the settings list, select Advanced Settings.
In the Key field, type a key.
In the Key field, enter this key:
vpxd.certmgmt.certs.minutesBefore
In the Value field, enter:
10
Click Add.
Click OK.