Error while replacing Machine SSL Cert, please see certificate-manager.log

[nettech1]

When replacing a self signed vcenter 6.7 certificate with a public cert the operation fails and vcenter reverts back to a self signed cert.

Error while starting services, please see service-control log for more details

Status : 0% Completed [Operation failed, performing automatic rollback]

Error while replacing Machine SSL Cert, please see /var/log/vmware/vmcad/certificate-manager.log for more information.

Performing rollback of Machine SSL Cert...

Same issue is published here. https://blog.krogloth.de/vmware-vcenter-vcsa-ssl-certificates-using-lets-encrypt/

Is pressing the Ctrl+C the only solution on 6.7 to keep the public cert?

Thanks

[ashilkrishnan]

Hi

Reviewing the 'certificate-manager.log' file on vCSA might help. One of the common rollbacks is caused by 3rd party extensions.

Please refer following article and check if you are getting similar errors in the logs  -  VMware Knowledge Base

[scott28tt]

Note the user also has another thread, on what might be the same issue:

vecs-cli failed. Error 4312