I am unable to authenticate on my VCSA, error 500 "An error occurred while fetching identity providers
". VMware KB says to upgrade to 7.0.3C.
Using SSH, i failed to upgrade RPM packages.
Lot of services failed to start (service-control --status
):
observability vlcm vmcam vmonapi vmware-certificateauthority vmware-certificatemanagement vmware-content-library vmware-hvc vmware-imagebuilder vmware-netdumper vmware-perfcharts vmware-pod vmware-rbd-watchdog vmware-sca vmware-sps vmware-stsd vmware-topologysvc vmware-updatemgr vmware-vapi-endpoint vmware-vcha vmware-vdtc vmware-vpxd vmware-vpxd-svcs vmware-vsan-health vsphere-ui vstats vtsdb wcp
No service log help me to find out why, but /var/log/firstbool/vsphere-ui-prestart.log
helps me: certificate verify failed: certificate has expired
.
Using /usr/lib/vmware-vmafd/bin/vecs-cli
, I found that machine
and WCP
certificates (autogenerated during the first install) expires after 2 years and my VM have 2 years.
I used certificate-manager
tool option 5 to regenerate all certificates. All certificates are (csr and key files) in a folder, but certificate-manager refuses to import them, cause i am unable to provide (last question "Please provide the signing certificate of the Solution User Certificates
") a certificate which can verify all these certificates, created by the tool itself.
I hope i'm near to the goal but i need extra help. Thank you