OK I think I'm a little closer now. in the logs I see that the VCenter appliance now is able to see the PSC, but because the CA is missing from the chain, there are entries that say they don't trust each other. I just need to find how to import the CA using the shell. I found this article but I'm not sure it's the right one: https://docs.vmware.com/en/VMware-vSphere/6.5/vsphere-esxi-vcenter-server-65-platform-services-controller-administration…
2018-08-07T21:10:42.893Z info vpxd[7FEEE01BE7A0] [Originator@6876 sub=HostGateway] Created ComponentManagerGatewaySource!
2018-08-07T21:10:42.893Z info vpxd[7FEEE01BE7A0] [Originator@6876 sub=HostGateway] Created CmConnectionFSM
2018-08-07T21:10:42.893Z info vpxd[7FEEE01BE7A0] [Originator@6876 sub=HostGateway] Created ComponentManagerClient.
2018-08-07T21:10:42.893Z info vpxd[7FEEE01BE7A0] [Originator@6876 sub=HostGateway] CmConnectionFSM::RunFSM(ST_INIT)
2018-08-07T21:10:42.894Z info vpxd[7FEEE01BE7A0] [Originator@6876 sub=[SSO][SsoCertificateManagerImpl]] [CreateServiceContent] Try to connect to SSO VMOMI endpoint.
2018-08-07T21:10:42.897Z error vpxd[7FEECEF8C700] [Originator@6876 sub=HttpConnectionPool-000001] [ConnectComplete] Connect failed to <cs p:00007feee41fef60, TCP:mlxpsc1.corp.com:443>; cnx: (
null), error: N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception: Verification parameters:
--> PeerThumbprint: 13:A3:98:1C:1B:84:FB:4D:EF:FA:1B:9E:3E:82:D4
--> ExpectedThumbprint: 0C:34:98:7B:2D:CA:F8:57:4E:1C:CC:A4:78:4B:8A:3V:89
--> ExpectedPeerName: mlxpsc1.corp.com
--> The remote host certificate has these problems:
-->
--> * unable to get local issuer certificate)
2018-08-07T21:10:42.898Z error vpxd[7FEEE01BE7A0] [Originator@6876 sub=HostGateway] [CisConnection]: Error getting trusted STS certificates: SSL Exception: Verification parameters:
--> PeerThumbprint: 13:A3:98:1C:1B:84:FB:4D:EF:FA:1B:9E:3E:82:D4
--> ExpectedThumbprint: 0C:34:98:7B:2D:CA:F8:57:4E:1C:CC:A4:78:4B:8A:3V:89
--> ExpectedPeerName: mlxpsc1.corp.com
--> The remote host certificate has these problems:
-->
--> * unable to get local issuer certificate
2018-08-07T21:10:42.898Z warning vpxd[7FEEE01BE7A0] [Originator@6876 sub=HostGateway] State(ST_INIT) failed with: SSL Exception: Verification parameters:
--> PeerThumbprint: 13:A3:98:1C:1B:84:FB:4D:EF:FA:1B:9E:3E:82:D4
--> ExpectedThumbprint: 0C:34:98:7B:2D:CA:F8:57:4E:1C:CC:A4:78:4B:8A:3V:89
--> ExpectedPeerName: mlxpsc1.corp.com
--> The remote host certificate has these problems:
-->
--> * unable to get local issuer certificate
2018-08-07T21:10:42.898Z warning vpxd[7FEEE01BE7A0] [Originator@6876 sub=HostGateway] ComponentManager service is not available! Will attempt a lazy init of CmClient on first use!