-1

I am unable to authenticate on my VCSA, error 500 "An error occurred while fetching identity providers". VMware KB says to upgrade to 7.0.3C.

Using SSH, i failed to upgrade RPM packages.

Lot of services failed to start (service-control --status):

observability vlcm vmcam vmonapi vmware-certificateauthority vmware-certificatemanagement vmware-content-library vmware-hvc vmware-imagebuilder vmware-netdumper vmware-perfcharts vmware-pod vmware-rbd-watchdog vmware-sca vmware-sps vmware-stsd vmware-topologysvc vmware-updatemgr vmware-vapi-endpoint vmware-vcha vmware-vdtc vmware-vpxd vmware-vpxd-svcs vmware-vsan-health vsphere-ui vstats vtsdb wcp

No service log help me to find out why, but /var/log/firstbool/vsphere-ui-prestart.log helps me: certificate verify failed: certificate has expired.

Using /usr/lib/vmware-vmafd/bin/vecs-cli, I found that machine and WCP certificates (autogenerated during the first install) expires after 2 years and my VM have 2 years.

I used certificate-manager tool option 5 to regenerate all certificates. All certificates are (csr and key files) in a folder, but certificate-manager refuses to import them, cause i am unable to provide (last question "Please provide the signing certificate of the Solution User Certificates") a certificate which can verify all these certificates, created by the tool itself.

I hope i'm near to the goal but i need extra help. Thank you

Baud
  • 182
  • 1
  • 1
  • 8

0 Answers0