Vcenter certificate expires and then service unable to start after reset

[molebleeze]

Hi all,

We just have a vcenter have all CA expires. Then I reset all the CA.

After that, the services are not able to start for all of them.

It always say

Service-control failed. Error Failed to start vmon services.vmon-cli RC=1, stderr=Failed to start vpxd-svcs, vapi-endpoint services. Error: Operation timed out

Can you help me?

See log file

[LapThi]

You Can use this link for troubleshooting your problème :

https://www.virtualizationhowto.com/2022/05/troubleshooting-vcenter-appliance-with-vsphere-diagnosti...

After that post the result of the script

And check if you have use the procédure for generate the certificat with this link :

https://kb.vmware.com/s/article/2112283

[maksym007]

pay attention to hosts. In case of the wrong CA assignment some ESXi's could be in status disconnected

[molebleeze]

see the diagnostic result attached.

[LapThi]

Hello,

you have a Dns problem :

Nameserver Queries
0.0.0.0
[FAIL] DNS with UDP - unable to resolve photon-machine to 172.16.71.21
[FAIL] Reverse DNS - unable to resolve 172.16.71.21 to photon-machine
[FAIL] DNS with TCP - unable to resolve photon-machine to 172.16.71.21

Commands used:
dig +short <fqdn> <nameserver>
dig +noall +answer -x <ip> <namserver>
dig +short +tcp <fqdn> <nameserver>

RESULT: [FAIL]
Please see KB: https://kb.vmware.com/s/article/54682

and error hostname

[FAIL] The hostname and PNID do not match!
Please see https://kb.vmware.com/s/article/2130599 for more details.

and

error LDAP certificate

Checking local LDAP cert

VMDIR CERT
[FAIL] Certificate expiration check
E4:83:74:88:18:95:19:DF:6F:3D:7E:DD:34:A4:1C:02:F2:08:90:4A: Cert expired 859 days ago!
For information on renewing the vmdir certificate, see:
https://docs.vmware.com/en/VMware-vSphere/6.0/com.vmware.vsphere.security.doc/GUID-585CF428-2BBC-47C...

I think the first thing is to fix the DNS problem. After that the vcenter should restart