topic Cert Manager Tool Not Working / VCSA Web UI Not Accessible in vCenter™ Server Discussions

Cert Manager Tool Not Working / VCSA Web UI Not Accessible

ctucci — Tue, 16 Jun 2020 01:19:47 GMT

Rebooted VCSA because it was behaving strangely with getting hosts into maintenance mode and it came back up but can't access web interface, I get "No healthy upstream" error. So, I can SSH in and I checked the vxpd.log file and it complains about expired certificates, etc... I want to launch the certificate tool in the command line to just reset all certs and see if that fixes the vxpd service not loading at all so I use /usr/lib/vmware-vmca/bin/certificate-manager and choose option 8 to reset all certs but I get "Certificate Manager tool do not support vCenter HA systems" which makes no sense because I don't and never did have HA enabled for VCSA itself.

How can I fix this so I can reset certs and hopefully get the appliance working again. Right now my only access is via SSH or appliance management webpage. Regular vCenter UI is down I am guessing because vpxd service won't start.

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

daphnissov — Tue, 16 Jun 2020 01:44:34 GMT

Probably best at this point to open a support request with GSS.

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

ctucci — Tue, 16 Jun 2020 01:46:05 GMT

Turns out running the command with sudo fixed the error. Didn't think to try that based on the error and the KB article on cert manager didn't seem to mention the need to.

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

daphnissov — Tue, 16 Jun 2020 01:47:34 GMT

Never seen cert manager need to be run with sudo when logged in as root.

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

ctucci — Tue, 16 Jun 2020 03:19:47 GMT

Running Option 8 to reset all certs seems to have fixed my original issue and allows me to login to VCSA web UI although the cert manager didn't technically finish successfully all the way because one service wouldn't restart after it replaced the certs. The "wcp" service which is now the only vCenter service that won't start. This is preventing VCSA backups from being made now because it complains that not all required services are running so something is still messed up.

If I try to start the service from appliance management UI, it says starting for a few minutes then returns the error "Operation timed out" on top.

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

vcloud3d — Sat, 06 Mar 2021 08:21:27 GMT

WCP Service fails to start - try KB article/80588 - https://kb.vmware.com/s/article/80588

If you still seeing error "No healthy upstream" try these steps which fixed mine.

Update "hosts" file on local pc: [add the ip add 127.0.0.1 <vcenter.domainname.com>]

Path - C:\Windows\System32\drivers\etc\hosts

###########vcenter###################
127.0.0.1 <vcenter.domainname.com>

SAVE

reboot vCenter

hope this helps!!

vcloud3d (John.A)

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

Lazslo — Wed, 19 May 2021 09:25:53 GMT

When I got the "Certificate Manager tool do not support vCenter HA systems" error the following solution worked for me:

1. mkdir /var/tmp/vmware

2. Run certificate-manager again

I hope it helps.

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

PaulB2 — Sun, 16 Jan 2022 16:32:07 GMT

Same issue here with 7.02.

sudo /usr/lib/vmware-vmca/bin/certificate-manager

works.

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

senndoh — Wed, 20 Jul 2022 09:16:52 GMT

this worked for me

1. mkdir /var/tmp/vmware 2. Run certificate-manager again

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

miyamotosan — Mon, 08 Aug 2022 06:32:18 GMT

makes no sense to me but it works so Im not going to question any further. Thanks!

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

ptarnawski — Mon, 08 Aug 2022 11:19:45 GMT

Check TRUSTED_ROOT certs for any duplications or stale ones.

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

vmkfix-SSA — Mon, 06 Feb 2023 15:49:58 GMT

I followed this article to resolve the issue.

https://vmkfix.blogspot.com/2023/02/certificate-manager-tool-do-not-support.html

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

Godwin_Christop — Sat, 13 May 2023 08:05:19 GMT

worked for me too!!!

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

Vik001 — Fri, 26 May 2023 15:16:41 GMT

shut down passive and witness nodes

ssh to active node and run:

vcha-destroy -f
reboot

ssh to active node and run:

/usr/lib/vmware-vmca/bin/certificate-manager

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

taco_chris — Wed, 11 Oct 2023 12:16:30 GMT

This worked for me. Thanks!

Re: Cert Manager Tool Not Working / VCSA Web UI Not Accessible

btechit — Wed, 18 Oct 2023 20:53:23 GMT

probably not logged in a root, since sudo needed to be run.