VMware Cloud Community
thomas1147
Contributor
Contributor

vco service did not start anymore (8.6.0)

Hi all,

we are using vRealize Orchestrator version 8.6.0 and had changed the DNS Alias with "vracli load-balancer set <DNSNAME>".

After this, the deployment was not successful anymore, vco is in status Stopped in " vracli service status --ignore-cache".

We have tried to set the DNS Name to the original name, but this did not help.

In /services-logs/prelude/vco-app/file-logs/vco-server-app.log we see some errors, starting with "javax.net.ssl.SSLHandshakeException: No trusted certificate found." I've attached the logfile.

We have tried the following, but it did not help.

  • vracli certificate ingress --generate auto --set stdin
  • vracli vro reset-auth

Has someone an idea how we can fix this issue?

 

 

Best Regards

Thomas

Reply
0 Kudos
2 Replies
thomas1147
Contributor
Contributor

Hi,

after some more investigation we are sure that a certificate change on the vCenter has caused the issue. The error message indicates that it is related to SSo - we use vSphere/vCenter Authentication.

But vracli vro reset-auth does not help here, has someone a better idea how we can get rid of the SSo configuration so that the deployment is successfull?

021-11-17T14:51:13.476Z WARN vco [host='vco-app-7944f79cd4-xgwdz' thread='localhost-startStop-1' user='' org='' trace=''] {} com.vm
ware.o11n.integration.cafe.services.ComponentManagerLookupService - Could not get Sso Endpoint information through service call. Fall back to local settings.
com.vmware.o11n.cis.CisException: com.vmware.o11n.cis.CisException: com.vmware.o11n.cis.CisException: javax.net.ssl.SSLHandshakeException: No trusted certificate found

Best Regards

Thomas

 

Reply
0 Kudos
thomas1147
Contributor
Contributor

Hi all,

we have fixed the issue.

vmware has documented how we can change the certificates for vCenter, and after this the vco service started again:

https://docs.vmware.com/en/vRealize-Orchestrator/8.3/com.vmware.vrealize.orchestrator-install-config...

Best Regards

Thomas

Reply
0 Kudos