Cannot seem to install VMware vCSA 6.7 cert on macOS 10.13.6 High Sierra

servermgrd looks up the certificate it uses for port 311 via an identity preference named "com.apple.servermgrd". By default, the preference points to the self-signed "com.apple.servermgrd" identity cert. After you change the preference you can remove the old self-signed cert without causing any harm. But you must make sure that the access control list (ACL) on the private key of the certificate that you want servermgrd to use allows servermgrd access.

If servermgrd cannot access the private key, it will delete the preference and create a new self-signed identity and set a new preference to point to the newly created identity cert.

Although there is no longer a button, you can still call CertificateWarningController.visitInsecureWebsiteWithTemporaryBypass() in the Safari Web Developer console to bypass the warning and visit the insecure site.

• If not enabled, go to Safari > Preferences > Advanced and select the "Show Develop menu in menu bar" option at the bottom.

  1. Develop > Show Javascript Console.

  2. Paste CertificateWarningController.visitInsecureWebsiteWithTemporaryBypass() in the console.

  3. Press enter to run the code and bypass the warning page without adding the untrusted certificate to your keychain.