Hi,

We recently had an issue with the Legacy Lookup Service certificate expiring in 10 days. To resolve this issue, support had us use the vCert tool to renew the Machine SSL cert, Solution user certs, and use lsdoctor -t for the SSL Trust Anchors. 

After doing so, we had to reconfigure our vSphere replication appliance and SRM appliance to reregister them with the new vCSA Machine SSL cert. 

However, now we are not able to get vmware-vapi-endpoint service to start. We've tried manually starting using the VAMI and receive the "Service crashed while starting" error. 

After doing some research, ran across article KB-59555 https://kb.vmware.com/s/article/59555

Command: # for i in `grep -l "BEGIN X509 CRL" *`;do openssl crl -inform PEM -text -noout -in $i | grep -A 1 " Authority Key Identifier";done

 - This command outputs several "grep: ########.0: No such file or directory" 

Command: # for i in `grep -l "BEGIN CERTIFICATE" *`;do openssl x509 -in $i -noout -text | grep -A 1 "Subject Key Identifier";done

- This command outputs several (more than 20) "X509v3 Subject Key Identifier:  "

I am wondering if this is something that can be corrected with lsdoctor.py or vCert tool. Any help would be greatly appreciated.