VMware Cloud Community
billdossett
Hot Shot
Hot Shot
‎06-08-2021 06:28 PM

certificate error in logs

Hi,  running vcenter 6.7 u1 with external PSC.  I am getting ready to uprgrade to latest 6.7 due to security concerns, however when I reboot my vcenter, I get the following in the vpxd.log indicating some form of certificate error on matching thumbprints. (hopefully I have inserted log file text in a readable format below). historically I believe it is a bad thing to try and upgrade if I have a cert error...  everything is working normally on the vcenter although we seemed to have lost most of the vsphere.local users out of the admins group - not sure if this is related... we only have a couple of local users and I put them back in the admins group and all is working fine again.  Any advice on this would be appreciated!

 

2021-06-08T21:10:38.059-04:00 error vpxd[04083] [Originator@6876 sub=HostGateway] [CisConnection]: Error getting trusted STS certificates: SSL Exception: Verification parameters:
--> PeerThumbprint: A1:5A:CE:0F:B2:5E:0C:C2:7F:BE:C1:FB:82:38:0B:45:2B:19:97:8C
--> ExpectedThumbprint: DC:01:58:30:47:0E:FE:7B:43:D0:45:A8:80:23:F8:9D:0A:18:66:14
--> ExpectedPeerName: useng2-ssoasp01.xxx.pvt
--> The remote host certificate has these problems:
-->
--> * unable to get local issuer certificate
2021-06-08T21:10:38.059-04:00 warning vpxd[04083] [Originator@6876 sub=HostGateway] State(ST_INIT) failed with: SSL Exception: Verification parameters:
--> PeerThumbprint: A1:5A:CE:0F:B2:5E:0C:C2:7F:BE:C1:FB:82:38:0B:45:2B:19:97:8C
--> ExpectedThumbprint: DC:01:58:30:47:0E:FE:7B:43:D0:45:A8:80:23:F8:9D:0A:18:66:14
--> ExpectedPeerName: useng2-ssoasp01.xxx.pvt
--> The remote host certificate has these problems:
-->
--> * unable to get local issuer certificate2021-06-08T21:10:38.059-04:00 error vpxd[04083] [Originator@6876 sub=HostGateway] [CisConnection]: Error getting trusted STS certificates: SSL Exception: Verification parameters:
--> PeerThumbprint: A1:5A:CE:0F:B2:5E:0C:C2:7F:BE:C1:FB:82:38:0B:45:2B:19:97:8C
--> ExpectedThumbprint: DC:01:58:30:47:0E:FE:7B:43:D0:45:A8:80:23:F8:9D:0A:18:66:14
--> ExpectedPeerName: useng2-ssoasp01.pbi.global.pvt
--> The remote host certificate has these problems:
-->
--> * unable to get local issuer certificate
2021-06-08T21:10:38.059-04:00 warning vpxd[04083] [Originator@6876 sub=HostGateway] State(ST_INIT) failed with: SSL Exception: Verification parameters:
--> PeerThumbprint: A1:5A:CE:0F:B2:5E:0C:C2:7F:BE:C1:FB:82:38:0B:45:2B:19:97:8C
--> ExpectedThumbprint: DC:01:58:30:47:0E:FE:7B:43:D0:45:A8:80:23:F8:9D:0A:18:66:14
--> ExpectedPeerName: useng2-ssoasp01.pbi.global.pvt
--> The remote host certificate has these problems:
-->
--> * unable to get local issuer certificate

 

Bill Dossett
0 Kudos
0 Replies