Overview:
========

The ActiveIQUnifiedManager-<version>.tar file contains the AIQUM-VAPP-INTER-ROOT-CERT.pem file. This file contains the Entrust root and
intermediate certificates.

While deploying a vApp(using the OVA file, the digital signature for the vApp package can be verified on the 'Review details' page.

If the "Publisher" column displays "Trusted certificate", it indicates that the downloaded vApp package is valid.

If the "Publisher" column displays "Invalid certificate", it indicates that the downloaded vApp package is invalid and might have been tampered with.

Customers will have to upload the root and intermediate certificate(AIQUM-VAPP-INTER-ROOT-CERT.pem) on vCenter Server version 7.0U3E(7.0.3.00600) and later.

Note: The functionality of verification of the digital signature is not supported in VMware vCenter Server 7.0.1 to the version prior to 7.0U3E.

Customers need not upload any root and intermediate certificate for vCenter Server versions between 6.x and 7.0.0.



Procedure
=========

1) Log in with the vSphere Client to the vCenter Server.

2) Specify the user name and password for administrator@vsphere.local or another member of the vCenter Single Sign-On Administrators group.
    If you specified a different domain during installation, log in as administrator@mydomain.

3) Navigate to the Certificate Management UI.
    a) From the Home menu, select Administration.
    b) Under Certificates, click Certificate Management.

4) If the system prompts you, enter the credentials of your vCenter Server.

5) Under Trusted Root Certificates, click Add.

6) Click Browse and select the location of the certificate .pem file(AIQUM-VAPP-INTER-ROOT-CERT.pem).

7) Click Add.
   The certificate is added to the store.

The below link has more information.

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.authentication.doc/GUID-B635BDD9-4F8A-4FD8-A4FE-7526272FC87D.html