larstr
Champion
Champion

Adding VASA provider and SMS certificate

Environment: vCenter 6, external PSC. VMCA setup as intermediate.

We're trying to install the 3PAR Recovery plugin as described here: http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c04125399-3.pdf

We're having a problem extracting the SMS certificate:

keytool -exportcert -v -keystore /etc/vmware-sps/ssl/sms.keystore -file /root/sms_new.cer -alias sms

Picked up JAVA_TOOL_OPTIONS: -Xms32M -Xmx128M

Enter keystore password:

keytool error: java.lang.Exception: Alias <sms> does not exist

java.lang.Exception: Alias <sms> does not exist

        at sun.security.tools.KeyTool.doExportCert(Unknown Source)

        at sun.security.tools.KeyTool.doCommands(Unknown Source)

        at sun.security.tools.KeyTool.run(Unknown Source)

        at sun.security.tools.KeyTool.main(Unknown Source)

By using vecs-cli it may look like the alias should be sms_self_signed instead of sms:

vecs-cli entry list --store SMS  --text

Number of entries in store :    1

Alias : sms_self_signed

Entry type :    Private Key

Certificate:

    Data:

        Version: 3 (0x2)

But it still doesn't work:

keytool -exportcert -v -keystore /etc/vmware-sps/ssl/sms.keystore -file /root/sms_new.cer -alias sms_self_signed

Picked up JAVA_TOOL_OPTIONS: -Xms32M -Xmx128M

Enter keystore password:

keytool error: java.lang.Exception: Alias <sms_self_signed> does not exist

java.lang.Exception: Alias <sms_self_signed> does not exist

        at sun.security.tools.KeyTool.doExportCert(Unknown Source)

        at sun.security.tools.KeyTool.doCommands(Unknown Source)

        at sun.security.tools.KeyTool.run(Unknown Source)

        at sun.security.tools.KeyTool.main(Unknown Source)

We have also tried resetting the certificate as described in the docs (delete keystores+restart), but it doesn't seem to work. I suspect that things may have changed from 5.5 to 6.0.

Any help is appreciated!

Lars

Tags (2)
0 Kudos
0 Replies