VMware Cloud Community
fangelo12
Contributor
Contributor

Replace vCenter 6.0 certificates with PSC - Failure

Friends, please help me.

We have vCenter 6.0 U2 (appliance) with PSC and we are trying to renew the certificates through the certificate manager, option 3. We followed this KB https://kb.vmware.com/s/article/2112283

The problem is when we put the IP of the PSC it returns this error:

Option[1 to 8]: 3

Please provide valid SSO and VC priviledged user credential to perform certificate operations.
Enter username [Administrator@vsphere.local]:
Enter password:

Performing operation on distributed setup, Please provide valid Infrastructure Server IP.
Server : 10.1.5.43

Traceback (most recent call last):
File "/usr/lib/vmware-vmca/bin/certificate-manager", line 721, in <module>
exit(main())
File "/usr/lib/vmware-vmca/bin/certificate-manager", line 715, in main
parse_arguments()
File "/usr/lib/vmware-vmca/bin/certificate-manager", line 706, in parse_arguments
get_machine_ssl_cert_to_dir()
File "/usr/lib/vmware-vmca/bin/certificate-manager", line 578, in get_machine_ssl_cert_to_dir
vecs.get_cert_file(Constants.MACHINE_SSL_STORE, Constants.MACHINE_SSL_ALIAS, oldcert)
File "/usr/lib/vmware/site-packages/cis/certificateManagerOps.py", line 396, in get_cert_file
raise e
cis.exceptions.InvokeCommandException: {
"resolution": null,
"detail": [
{
"args": [
""
],
"id": "install.ciscommon.command.errinvoke",
"localized": "An error occurred while invoking external command : ''",
"translatable": "An error occurred while invoking external command : '%(0)s'"
},
"Error while creating backup cert file for MACHINE_SSL_CERT"
],
"componentKey": null,
"problemId": null
}

0 Kudos
2 Replies
kenobi79
Enthusiast
Enthusiast

hi

do you renew the STS certs?

  • Ensure that the STS certificate is valid before regenerating the certificate using Certificate Manager.
  • If STS is expired or corrupted certificate regeneration will fail due to Service dependencies failure to start without a valid token.

 

See this blog 

https://luchodelorenzi.com/2020/05/28/proactively-checking-and-replacing-sts-certificate-on-vsphere-...

 

and then follow the KB 

 

bye 

 

Bye - Riccardo Panzieri
https://www.i3piccioni.it
0 Kudos
Ajay1988
Expert
Expert

Issue is here "Error while creating backup cert file for MACHINE_SSL_CERT""
Check   https://kb.vmware.com/s/article/67660

If you think your queries have been answered
Mark this response as "Correct" or "Helpful".

Regards,
AJ
0 Kudos