topic Re: VMware PSC certifate in vCenter™ Server Discussions

VMware PSC certifate

dharmendrarhce — Sun, 18 Mar 2018 12:52:27 GMT

I have updated VMware PSC root ssl certifate using vcenter web GUI.

After updating certifate i am unable to login other Vcenter .

Getting errror . Error details in the attchmenat.

Someone can help pls .

Re: VMware PSC certifate

MohamadAlhousse — Sun, 18 Mar 2018 21:35:18 GMT

hi dharmendrarhce,

Please can we know the version of the PSC controller and whether you have PSCs running in HA mode or just a single external PSC ?

Regards,

Re: VMware PSC certifate

dharmendrarhce — Mon, 19 Mar 2018 01:32:36 GMT

We are using 6.5 version and it is single machine .

Re: VMware PSC certifate

RajeevVCP4 — Mon, 19 Mar 2018 05:55:26 GMT

To work around this issue if you are unable to upgrade, copy the /usr/lib/vmware-sso/bin/UpdateLsEndpoint.py file from 6.5 GA for updating the end points.

Vmware KB 2150779

Re: VMware PSC certifate

dharmendrarhce — Mon, 19 Mar 2018 06:17:32 GMT

Ok. is you mean to say that I have to copy the other file from my PSC server to vcenter server in the same location ??

Re: VMware PSC certifate

RajeevVCP4 — Mon, 19 Mar 2018 13:49:26 GMT

For further checking please attach recent

vsphere_client_virgo.log

and time stamp when issue occurred

Re: VMware PSC certifate

Vijay2027 — Mon, 19 Mar 2018 13:57:56 GMT

Is this PSC behind a LB setup?

Re: VMware PSC certifate

Yuva_1990 — Mon, 19 Mar 2018 14:25:32 GMT

Customer mentioned that psc is a single machine ideally there should not be load balancer

Re: VMware PSC certifate

Yuva_1990 — Mon, 19 Mar 2018 14:30:35 GMT

Can you help us with the exact version of the psc and Vcenter

Regards

Yuvaraj

Re: VMware PSC certifate

dharmendrarhce — Mon, 19 Mar 2018 15:03:10 GMT

We have 1 PSC 6.5 Machine with out LB and that is connected with one vcenter 6.5 appliance .

I have root & machine SSL CA certificate . After SSL certificate update We are unable to login in the vcenter

any help ?

Re: VMware PSC certifate

MohamadAlhousse — Mon, 19 Mar 2018 15:49:50 GMT

Hi dharmendrarhce

This error appears if the key length of the root CA is greater than 2048. Keys with 4096 and greater length are causing issues.

If you have a Microsoft CA you can do the following to resolve your issue:

1. Create a CAPolicy.inf in C:\Windows

2. In the CAPolicy.inf put:

[Certsrv_Server]

RenewalKeyLength=2048

RenewalValidityPeriod=Years

RenewalValidityPeriodUnits=10

3. Renew the CA root certificate and accept regenerating the key and you’re done.

4. Reset PSC and VCSA certificate and import the new generated SSL certificates again.

Regards,

Mohamad