VMware Cloud Community
ASivkov
Contributor
Contributor

VCenter 5.1 startup failed

Dear colleagues,

I have a problem starting my VCenter service and I see in SSO log files the following:

trace.com.rsa.riat.ws.security.trust.WSTrustContract, DEBUG, <server_name>,,,,Creates and Expires time elements are not null in the RST

trace.com.rsa.riat.ws.security.trust.WSTrustContract, ERROR, <server_name>,,,,Configuration Error

If I compare with successfull startups/logins earlier I see that normally I should have:

trace.com.rsa.riat.ws.security.trust.WSTrustContract, DEBUG, <server_name>,,,,Creates and Expires time elements are not null in the RST

trace.com.rsa.riat.ws.security.trust.WSTrustContract, DEBUG, <server_name>,,,,Requested lifetime for the token is more than the allowed lifetime

...

I know that a year ago (exaclty) I was renewing the cerificates and as well changed admin password. But normally I have renewed certificates again in december, and I already tried to reset admin password using rsautil, this didn't help.

Unfortunately on this setup I do not have webclient, and I can't install it now because sso reg procedure fails with same error: configuration error.

Any help will be appretiated,

Thanks in advance,

Artyom

Tags (2)
Reply
0 Kudos
1 Reply
StasII
Contributor
Contributor

Sorry for my English.

My certificates expires on all components (services).

I have the same error in log-s.

I can`t connect to VC from any client.

VC version was 5.1.0b (pre-update 1).

I bagan update certificates by automation tool.

But after update SSO certifacates, SSO stop working,

ssolscli.cmd https://SSOserver.domain.com:7444/lookupservice/sdk

show

Intializing registration provider...

Getting SSL certificates for https://SSOserver.domain.com:7444/lookupserv

ice/sdk

Getting SSL certificates for https://SSOserver.domain.com:7444/sso-admins

erver/sdk

Anonymous execution

Return code is: OperationFailed

100


So can`t update other cert-s. But i don`t reboot server.

And in log i see same as you wrote.


I reinstall SSO service, BUT DON`T reboot server again (today i think it must be rebooted), and before reregister components (as discribe here VMware KB:    Re-pointing and re-registering VMware vCenter Server 5.1 / 5.5 and components), i run ssolscli.cmd https://SSOserver.domain.com:7444/lookupservice/sdk again after clear SSO installation, and, what a surprise, it get me OperationFailed and same error in log. It was strange.

So i delete all VC components as discribe here http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=103055... ,

REBOOOT server, backup SSO and Server databases,  install version 5.1u3 with old SSO and SERVER data...

When i connect to VC all hosts and VM-s was shown as disconnected. I RECONNECT all hosts  (appear in menu on right mouse button press on host), enter root passwords of each host, and all VM-s and hosts cange status to normal! Nothing was lost, all performanse statistics, all distributed svitches and e.t.c, all exist and OK.

On next day i generate new cert-s only for Inventory, Server and webclient components and it`s insta...

Reply
0 Kudos