VMware Cloud Community
Garm82
Contributor
Contributor
Jump to solution

Adding a new Storage Provider Fails VMCA Cannot Create Certificate

Hi,

i installed a new VCenter 6.7 Appliance. But if i want to add the a new Storage Provider for my EMC Unity Vcenter tells me he cannot create a new signed Certificate

My first try was to reset all the Certificates for the Vcenter over SSH. But dosent Help.

Bei der Bereitstellung eines signierten Zertifikats der VMware Certificate Authority (VMCA) für den Anbieter ist ein Problem aufgetreten.

Reply
0 Kudos
1 Solution

Accepted Solutions
SupreetK
Commander
Commander
Jump to solution

Below are the errors we should be concerned about -

2018-08-02T20:52:53.821Z [pool-11-thread-1] ERROR opId= com.vmware.vim.sms.provider.vasa.VersionHandler - Exception while retrieving version info for provider (sms.fault.CertificateNotTrusted)

2018-08-02T20:53:02.141Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.provider.vasa.cert.CertificateAuthority - Failed to get a VMCA signed certificate for CSR. Error : 70012 Message : VMCA_INVALID_CSR_FIELD

2018-08-02T20:53:02.142Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.provider.vasa.VasaProviderImpl - [init] Provider creation failed while getting a certificate.

com.vmware.vim.sms.fault.CertificateException: Failed to get a VMCA signed certificate for CSR. Error : 70012 Message : VMCA_INVALID_CSR_FIELD

Looks like the VASA provider registration workflow has changed with 6.7. Since 6.7 is relatively newer, not many storage vendors would have had a chance to work with this version. As you have a new setup, can you reinstall with 6.5 and check if the registration works? If not, involve VMware and EMC support for further assistance.

Please consider marking this answer as "correct" or "helpful" if you think your questions have been answered.

Cheers,

Supreet

View solution in original post

Reply
0 Kudos
3 Replies
SupreetK
Commander
Commander
Jump to solution

At the time of registration, what error do we see in the sps.log file on the vCenter? Can you try registering once again and share the sps.log file from the vCenter? Location will be </var/log/vmware/vmware-sps/sps.log>.

Cheers,

Supreet

Reply
0 Kudos
Garm82
Contributor
Contributor
Jump to solution

2018-08-02T20:49:38.320Z [pool-10-thread-1] INFO  opId=sps-SHPoller-231038-680 com.vmware.vim.sms.health.ServiceHealthPoller - Ran service health check

2018-08-02T20:49:45.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:49:45.544Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 13 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:50:05.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:50:05.537Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 6 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:50:25.533Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:50:25.541Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 8 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:50:38.313Z [pool-10-thread-1] INFO  opId=sps-SHPoller-231038-680 com.vmware.vim.sms.health.ServiceHealthPoller - Ran service health check

2018-08-02T20:50:45.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:50:45.540Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 9 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:51:05.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:51:05.540Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 9 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:51:25.533Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:51:25.538Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 5 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:51:38.319Z [pool-10-thread-1] INFO  opId=sps-SHPoller-231038-680 com.vmware.vim.sms.health.ServiceHealthPoller - Ran service health check

2018-08-02T20:51:45.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:51:45.540Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 9 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:52:05.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:52:05.538Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 7 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:52:25.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:52:25.537Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 5 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:52:38.315Z [pool-10-thread-1] INFO  opId=sps-SHPoller-231038-680 com.vmware.vim.sms.health.ServiceHealthPoller - Ran service health check

2018-08-02T20:52:45.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:52:45.536Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 5 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:52:53.803Z [pool-11-thread-1] INFO  opId= com.vmware.vim.sms.StorageManagerImpl - Starting Timer: registerProviderInt. Provider spec: (sms.provider.VasaProviderSpec) {

   dynamicType = null,

   dynamicProperty = null,

   name = unity,

   description = null,

   username = admin,

   password = (not shown),

   url = https://192.168.77.96:8443/vasa/version.xml,

   certificate = null

}

2018-08-02T20:52:53.820Z [pool-11-thread-1] ERROR opId= com.vmware.vim.sms.util.CustomSslSocketFactory - CompositeTrustManager could not validate certificate:

[

[

  Version: V3

  Subject: CN=Unity

  Signature Algorithm: SHA512withRSA, OID = 1.2.840.113549.1.1.13

  Key:  Sun RSA public key, 2048 bits

  modulus: 25100536845359775859643159245574981152566492835334158344860471479896135444313097306345146000955780278193558615430411095151739969609307502566707375234530541436591150072387946024559536687402963795393569039696609897229296101108095118068385569051841820657359545558303950878235849934306790438456134479590117897587856102977549355228953707358010849292099942127524197714018578091387545986790400101265652048303347777184117283633132757912255453953764452839913998806108861544088836213671910716291400612749128536247055043252343916068548002564479389781608620543561482429615135351760154244059477504784324709302102379583985657600373

  public exponent: 65537

  Validity: [From: Mon Jul 31 11:41:57 UTC 2017,

               To: Thu Jul 30 11:41:57 UTC 2020]

  Issuer: CN=Unity

  SerialNumber: [    e0f756a7 2b11f764]

Certificate Extensions: 3

[1]: ObjectId: 2.5.29.19 Criticality=false

BasicConstraints:[

  CA:false

  PathLen: undefined

]

[2]: ObjectId: 2.5.29.15 Criticality=false

KeyUsage [

  DigitalSignature

  Non_repudiation

  Key_Encipherment

]

[3]: ObjectId: 2.5.29.17 Criticality=false

SubjectAlternativeName [

  IPAddress: 192.168.77.96

  DNSName: 192.168.77.96

  DNSName: Unity

]

]

  Algorithm: [SHA512withRSA]

  Signature:

0000: 7C A2 1F 45 34 D6 F7 1E   74 30 94 9F 88 25 35 EC  ...E4...t0...%5.

0010: F2 FB 2F 5D 28 8D CA 53   47 68 98 04 33 AF 92 90  ../](..SGh..3...

0020: BA 40 8E B1 D0 FD 24 BA   9A 18 30 3C BD E5 BA A4  .@....$...0<....

0030: 88 BF 4B D5 E1 3A 24 EC   82 6C 4D 1E 13 4B 36 7A  ..K..:$..lM..K6z

0040: F0 9A 9D 71 A1 EF 69 23   4C 45 4C 5A 4C AF 4B CE  ...q..i#LELZL.K.

0050: C4 9A 74 49 53 DC 64 BD   60 41 6B EE 76 87 45 8E  ..tIS.d.`Ak.v.E.

0060: 61 00 66 B4 58 D3 AA 1F   EE 6C D4 06 72 96 B4 BB  a.f.X....l..r...

0070: B9 7E D0 3D 71 DA 41 FC   F8 C6 AF C8 1D 41 79 7E  ...=q.A......Ay.

0080: 43 1E A8 E4 E0 6F 19 F8   24 23 47 4A 5D 74 81 47  C....o..$#GJ]t.G

0090: E0 9F 64 22 6A A1 AD 17   DC BE 8A 3D 6E 8B 5E FF  ..d"j......=n.^.

00A0: D9 56 21 3D CC 7C 1B A4   29 E9 4D 1E A7 2C 1C 70  .V!=....).M..,.p

00B0: 7F CF 34 1A F6 6D 0A 1B   49 E3 53 98 35 EA 6A 35  ..4..m..I.S.5.j5

00C0: B9 21 E1 3F 52 E6 A1 92   00 7D A9 DE 70 BD 23 11  .!.?R.......p.#.

00D0: 60 50 C4 44 BE 83 C9 CE   37 FE 49 5F 0F 11 DD A5  `P.D....7.I_....

00E0: 7C 83 D2 74 7F 45 D9 F4   A7 93 A5 DD 38 04 F8 33  ...t.E......8..3

00F0: 57 2F E4 91 08 03 C2 B3   8A B8 86 5A 2A B6 56 DB  W/.........Z*.V.

]

2018-08-02T20:52:53.820Z [pool-11-thread-1] WARN  opId= com.vmware.vim.sms.provider.vasa.VersionHandler - [isLegacyProvider] Failed to retrive version information from provider - https://192.168.77.96:8443/vasa/version.xml: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

2018-08-02T20:52:53.821Z [pool-11-thread-1] ERROR opId= com.vmware.vim.sms.provider.vasa.VersionHandler - Exception while retrieving version info for provider

(sms.fault.CertificateNotTrusted) {

   faultCause = null,

   faultMessage = null,

   certificate = MIIC5DCCAcygAwIBAgIJAOD3VqcrEfdkMA0GCSqGSIb3DQEBDQUAMBAxDjAMBgNVBAMTBVVuaXR5

MB4XDTE3MDczMTExNDE1N1oXDTIwMDczMDExNDE1N1owEDEOMAwGA1UEAxMFVW5pdHkwggEiMA0G

CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1aU3ciSBR9nQGLMzmdxrMLIrjDpyQxszSBwqlPN3

XUUMEwb0ZwpI1CFv7FvxQnFv1Eg4NZNYiahipU0c6EoAdMaOi05cR3VkL+2i9Hr5A7H+szUJb47y

Wvaib/Py+V++ZCxbuI0MHMtTlg7S9lPHqSPU5GG6OIDAvO0cSzgnUzw5DWodjeMGoAYFsr+ewFUW

+p4cJe51Bm2vJCLG98xXOYCZrRZfvdhf+jJ4zICa6fXAFsCdOdfvrSuyGfkO04s/G1JyH42Nly2g

j4OvZip2HUlre6OWa4eiuiOlQT+TmHGD1qHN+zU3OifmTtz58+MSfLHimOD7NEGv7TmLJFl1AgMB

AAGjQTA/MCUGA1UdEQQeMByHBMCoTWCCDTE5Mi4xNjguNzcuOTaCBVVuaXR5MAkGA1UdEwQCMAAw

CwYDVR0PBAQDAgXgMA0GCSqGSIb3DQEBDQUAA4IBAQB8oh9FNNb3HnQwlJ+IJTXs8vsvXSiNylNH

aJgEM6+SkLpAjrHQ/SS6mhgwPL3luqSIv0vV4Tok7IJsTR4TSzZ68JqdcaHvaSNMRUxaTK9LzsSa

dElT3GS9YEFr7naHRY5hAGa0WNOqH+5s1AZylrS7uX7QPXHaQfz4xq/IHUF5fkMeqOTgbxn4JCNH

Sl10gUfgn2QiaqGtF9y+ij1ui17/2VYhPcx8G6Qp6U0epywccH/PNBr2bQobSeNTmDXqajW5IeE/

UuahkgB9qd5wvSMRYFDERL6Dyc43/klfDxHdpXyD0nR/Rdn0p5Ol3TgE+DNXL+SRCAPCs4q4hloq

tlbb

}

        at com.vmware.vim.sms.provider.vasa.VersionHandler.isLegacyProvider(VersionHandler.java:314)

        at com.vmware.vim.sms.provider.vasa.VersionHandler.parseVersionXml(VersionHandler.java:222)

        at com.vmware.vim.sms.provider.vasa.VersionHandler.retrieveProviderVersionInfoFromUrl(VersionHandler.java:86)

        at com.vmware.vim.sms.provider.vasa.VersionHandler.retrieveProviderVersionInfo(VersionHandler.java:72)

        at com.vmware.vim.sms.provider.ProviderFactory.createVasaProvider(ProviderFactory.java:201)

        at com.vmware.vim.sms.provider.ProviderFactory.createProvider(ProviderFactory.java:170)

        at com.vmware.vim.sms.StorageManagerImpl.registerProviderInt(StorageManagerImpl.java:482)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

        at com.vmware.vim.sms.task.JobHandler.run(JobHandler.java:70)

        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)

        at java.util.concurrent.FutureTask.run(FutureTask.java:266)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

        at java.lang.Thread.run(Thread.java:748)

2018-08-02T20:52:53.856Z [pool-11-thread-1] INFO  opId= com.vmware.vim.sms.StorageManagerImpl - Timer stopped: registerProviderInt, Time taken: 53 ms.

2018-08-02T20:52:56.179Z [pool-17-thread-7] INFO  opId=vb-136:dam-auto-generated: StorageProvidersViewMediator:dr-75:SmsPropertyProvider:479-13207-ngc:70000491 com.vmware.vim.sms.StorageManagerImpl - Starting Timer: queryArray. Provider id: null

2018-08-02T20:52:56.213Z [pool-17-thread-7] INFO  opId=vb-136:dam-auto-generated: StorageProvidersViewMediator:dr-75:SmsPropertyProvider:479-13207-ngc:70000491 com.vmware.vim.sms.StorageManagerImpl - Timer stopped: queryArray, Time taken: 34 ms.

2018-08-02T20:52:56.220Z [pool-17-thread-8] INFO  opId=vb-136:dam-auto-generated: StorageProvidersViewMediator:dr-75:SmsPropertyProvider:479-13209-ngc:70000491 com.vmware.vim.sms.StorageManagerImpl - Starting Timer: queryProvider.

2018-08-02T20:52:56.221Z [pool-17-thread-8] INFO  opId=vb-136:dam-auto-generated: StorageProvidersViewMediator:dr-75:SmsPropertyProvider:479-13209-ngc:70000491 com.vmware.vim.sms.StorageManagerImpl - Timer stopped: queryProvider, Time taken: 0 ms.

2018-08-02T20:52:59.086Z [pool-11-thread-2] INFO  opId= com.vmware.vim.sms.StorageManagerImpl - Starting Timer: registerProviderInt. Provider spec: (sms.provider.VasaProviderSpec) {

   dynamicType = null,

   dynamicProperty = null,

   name = unity,

   description = null,

   username = admin,

   password = (not shown),

   url = https://192.168.77.96:8443/vasa/version.xml,

   certificate = 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

}

2018-08-02T20:52:59.277Z [pool-11-thread-2] INFO  opId= com.vmware.vim.sms.client.VasaClientImpl - Starting Timer: VasaClientImpl : Constructor.

2018-08-02T20:52:59.298Z [pool-11-thread-2] INFO  opId= com.vmware.vim.sms.client.VasaClientImpl - Timer stopped: VasaClientImpl : Constructor, Time taken: 21 ms.

2018-08-02T20:53:00.249Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.util.CustomSslSocketFactory - CompositeTrustManager could not validate certificate:

[

[

  Version: V3

  Subject: CN=Unity

  Signature Algorithm: SHA512withRSA, OID = 1.2.840.113549.1.1.13

  Key:  Sun RSA public key, 2048 bits

  modulus: 25100536845359775859643159245574981152566492835334158344860471479896135444313097306345146000955780278193558615430411095151739969609307502566707375234530541436591150072387946024559536687402963795393569039696609897229296101108095118068385569051841820657359545558303950878235849934306790438456134479590117897587856102977549355228953707358010849292099942127524197714018578091387545986790400101265652048303347777184117283633132757912255453953764452839913998806108861544088836213671910716291400612749128536247055043252343916068548002564479389781608620543561482429615135351760154244059477504784324709302102379583985657600373

  public exponent: 65537

  Validity: [From: Mon Jul 31 11:41:57 UTC 2017,

               To: Thu Jul 30 11:41:57 UTC 2020]

  Issuer: CN=Unity

  SerialNumber: [    e0f756a7 2b11f764]

Certificate Extensions: 3

[1]: ObjectId: 2.5.29.19 Criticality=false

BasicConstraints:[

  CA:false

  PathLen: undefined

]

[2]: ObjectId: 2.5.29.15 Criticality=false

KeyUsage [

  DigitalSignature

  Non_repudiation

  Key_Encipherment

]

[3]: ObjectId: 2.5.29.17 Criticality=false

SubjectAlternativeName [

  IPAddress: 192.168.77.96

  DNSName: 192.168.77.96

  DNSName: Unity

]

]

  Algorithm: [SHA512withRSA]

  Signature:

0000: 7C A2 1F 45 34 D6 F7 1E   74 30 94 9F 88 25 35 EC  ...E4...t0...%5.

0010: F2 FB 2F 5D 28 8D CA 53   47 68 98 04 33 AF 92 90  ../](..SGh..3...

0020: BA 40 8E B1 D0 FD 24 BA   9A 18 30 3C BD E5 BA A4  .@....$...0<....

0030: 88 BF 4B D5 E1 3A 24 EC   82 6C 4D 1E 13 4B 36 7A  ..K..:$..lM..K6z

0040: F0 9A 9D 71 A1 EF 69 23   4C 45 4C 5A 4C AF 4B CE  ...q..i#LELZL.K.

0050: C4 9A 74 49 53 DC 64 BD   60 41 6B EE 76 87 45 8E  ..tIS.d.`Ak.v.E.

0060: 61 00 66 B4 58 D3 AA 1F   EE 6C D4 06 72 96 B4 BB  a.f.X....l..r...

0070: B9 7E D0 3D 71 DA 41 FC   F8 C6 AF C8 1D 41 79 7E  ...=q.A......Ay.

0080: 43 1E A8 E4 E0 6F 19 F8   24 23 47 4A 5D 74 81 47  C....o..$#GJ]t.G

0090: E0 9F 64 22 6A A1 AD 17   DC BE 8A 3D 6E 8B 5E FF  ..d"j......=n.^.

00A0: D9 56 21 3D CC 7C 1B A4   29 E9 4D 1E A7 2C 1C 70  .V!=....).M..,.p

00B0: 7F CF 34 1A F6 6D 0A 1B   49 E3 53 98 35 EA 6A 35  ..4..m..I.S.5.j5

00C0: B9 21 E1 3F 52 E6 A1 92   00 7D A9 DE 70 BD 23 11  .!.?R.......p.#.

00D0: 60 50 C4 44 BE 83 C9 CE   37 FE 49 5F 0F 11 DD A5  `P.D....7.I_....

00E0: 7C 83 D2 74 7F 45 D9 F4   A7 93 A5 DD 38 04 F8 33  ...t.E......8..3

00F0: 57 2F E4 91 08 03 C2 B3   8A B8 86 5A 2A B6 56 DB  W/.........Z*.V.

]

2018-08-02T20:53:00.249Z [pool-11-thread-2] WARN  opId= com.vmware.vim.sms.provider.vasa.version.Version3Strategy - [isVPCertTrusted] validation exception:  sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

2018-08-02T20:53:02.030Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.provider.vasa.cert.VmcaClientHandler - Exception in invocation of getCertificateForHost

java.lang.reflect.InvocationTargetException

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

        at com.vmware.vim.sms.provider.vasa.cert.VmcaClientHandler.invokeMethod(VmcaClientHandler.java:43)

        at com.vmware.vim.sms.provider.vasa.cert.VmcaClientHandler.invoke(VmcaClientHandler.java:31)

        at com.sun.proxy.$Proxy102.getCertificateForHost(Unknown Source)

        at com.vmware.vim.sms.provider.vasa.cert.CertificateAuthority.getCAsignedCertificate(CertificateAuthority.java:120)

        at com.vmware.vim.sms.provider.vasa.cert.CertificateManagerImpl.getCAsignedCertificate(CertificateManagerImpl.java:297)

        at com.vmware.vim.sms.provider.vasa.VasaProviderImpl.provisionCertificate(VasaProviderImpl.java:494)

        at com.vmware.vim.sms.provider.vasa.version.Version3Strategy.provisionCASignedCertificate(Version3Strategy.java:107)

        at com.vmware.vim.sms.provider.vasa.VasaProviderImpl.init(VasaProviderImpl.java:1023)

        at com.vmware.vim.sms.provider.ProviderFactory.createVasaProvider(ProviderFactory.java:224)

        at com.vmware.vim.sms.provider.ProviderFactory.createProvider(ProviderFactory.java:170)

        at com.vmware.vim.sms.StorageManagerImpl.registerProviderInt(StorageManagerImpl.java:482)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

        at com.vmware.vim.sms.task.JobHandler.run(JobHandler.java:70)

        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)

        at java.util.concurrent.FutureTask.run(FutureTask.java:266)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

        at java.lang.Thread.run(Thread.java:748)

Caused by: com.vmware.certificate.VMCAException: VMCA_INVALID_CSR_FIELD

        at com.vmware.certificate.VMCAAdapter2.THROW_IF_NEEDED(VMCAAdapter2.java:510)

        at com.vmware.certificate.VMCAAdapter2.VMCAGetSignedCertificateForHost(VMCAAdapter2.java:604)

        at com.vmware.certificate.VMCAClient.getCertificateForHost(VMCAClient.java:341)

        at com.vmware.certificate.VMCAClient.getCertificateForHost(VMCAClient.java:308)

        at com.vmware.vim.sms.provider.vasa.cert.SmsVmcaClientImpl.getCertificateForHost(SmsVmcaClientImpl.java:108)

        ... 25 more

2018-08-02T20:53:02.141Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.provider.vasa.cert.CertificateAuthority - Failed to get a VMCA signed certificate for CSR. Error : 70012 Message : VMCA_INVALID_CSR_FIELD

2018-08-02T20:53:02.142Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.provider.vasa.VasaProviderImpl - [init] Provider creation failed while getting a certificate.

com.vmware.vim.sms.fault.CertificateException: Failed to get a VMCA signed certificate for CSR. Error : 70012 Message : VMCA_INVALID_CSR_FIELD

        at com.vmware.vim.sms.provider.vasa.cert.CertificateAuthority.getCAsignedCertificate(CertificateAuthority.java:132)

        at com.vmware.vim.sms.provider.vasa.cert.CertificateManagerImpl.getCAsignedCertificate(CertificateManagerImpl.java:297)

        at com.vmware.vim.sms.provider.vasa.VasaProviderImpl.provisionCertificate(VasaProviderImpl.java:494)

        at com.vmware.vim.sms.provider.vasa.version.Version3Strategy.provisionCASignedCertificate(Version3Strategy.java:107)

        at com.vmware.vim.sms.provider.vasa.VasaProviderImpl.init(VasaProviderImpl.java:1023)

        at com.vmware.vim.sms.provider.ProviderFactory.createVasaProvider(ProviderFactory.java:224)

        at com.vmware.vim.sms.provider.ProviderFactory.createProvider(ProviderFactory.java:170)

        at com.vmware.vim.sms.StorageManagerImpl.registerProviderInt(StorageManagerImpl.java:482)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

        at com.vmware.vim.sms.task.JobHandler.run(JobHandler.java:70)

        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)

        at java.util.concurrent.FutureTask.run(FutureTask.java:266)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

        at java.lang.Thread.run(Thread.java:748)

Caused by: com.vmware.certificate.VMCAException: VMCA_INVALID_CSR_FIELD

        at com.vmware.certificate.VMCAAdapter2.THROW_IF_NEEDED(VMCAAdapter2.java:510)

        at com.vmware.certificate.VMCAAdapter2.VMCAGetSignedCertificateForHost(VMCAAdapter2.java:604)

        at com.vmware.certificate.VMCAClient.getCertificateForHost(VMCAClient.java:341)

        at com.vmware.certificate.VMCAClient.getCertificateForHost(VMCAClient.java:308)

        at com.vmware.vim.sms.provider.vasa.cert.SmsVmcaClientImpl.getCertificateForHost(SmsVmcaClientImpl.java:108)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

        at com.vmware.vim.sms.provider.vasa.cert.VmcaClientHandler.invokeMethod(VmcaClientHandler.java:43)

        at com.vmware.vim.sms.provider.vasa.cert.VmcaClientHandler.invokeMethod(VmcaClientHandler.java:57)

        at com.vmware.vim.sms.provider.vasa.cert.VmcaClientHandler.invoke(VmcaClientHandler.java:31)

        at com.sun.proxy.$Proxy102.getCertificateForHost(Unknown Source)

        at com.vmware.vim.sms.provider.vasa.cert.CertificateAuthority.getCAsignedCertificate(CertificateAuthority.java:120)

        ... 17 more

2018-08-02T20:53:02.278Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.kvstore.KvStorePersistenceManager - VasaProviderInfo could not be found for the provider: 30893861-22c7-475e-aaf8-c79892fca586

2018-08-02T20:53:02.279Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.provider.vasa.VasaProviderInfoPersistenceManager - Exception occured when removing the provider information in KV store:30893861-22c7-475e-aaf8-c79892fca586

com.vmware.vim.sms.fault.KvNotFoundException: VasaProviderInfo could not be found for the provider: 30893861-22c7-475e-aaf8-c79892fca586

        at com.vmware.vim.sms.kvstore.KvStorePersistenceManager.getVersionedObject(KvStorePersistenceManager.java:170)

        at com.vmware.vim.sms.kvstore.KvStorePersistenceManager.delete(KvStorePersistenceManager.java:153)

        at com.vmware.vim.sms.provider.vasa.VasaProviderInfoPersistenceManager.removeKvProviderInfo(VasaProviderInfoPersistenceManager.java:191)

        at com.vmware.vim.sms.provider.vasa.VasaProviderInfoPersistenceManager.cleanProvider(VasaProviderInfoPersistenceManager.java:167)

        at com.vmware.vim.sms.provider.vasa.VasaProviderImpl.rollbackRegistration(VasaProviderImpl.java:1299)

        at com.vmware.vim.sms.provider.vasa.VasaProviderImpl.init(VasaProviderImpl.java:1038)

        at com.vmware.vim.sms.provider.ProviderFactory.createVasaProvider(ProviderFactory.java:224)

        at com.vmware.vim.sms.provider.ProviderFactory.createProvider(ProviderFactory.java:170)

        at com.vmware.vim.sms.StorageManagerImpl.registerProviderInt(StorageManagerImpl.java:482)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

        at com.vmware.vim.sms.task.JobHandler.run(JobHandler.java:70)

        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)

        at java.util.concurrent.FutureTask.run(FutureTask.java:266)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

        at java.lang.Thread.run(Thread.java:748)

2018-08-02T20:53:02.280Z [pool-11-thread-2] WARN  opId= com.vmware.vim.sms.provider.vasa.VasaProviderInfoPersistenceManager - [cleanProvider] Failed to remove provider from KV store!

com.vmware.vim.sms.fault.DBPersistenceException: Exception occured when removing the provider information in KV store30893861-22c7-475e-aaf8-c79892fca586

        at com.vmware.vim.sms.provider.vasa.VasaProviderInfoPersistenceManager.removeKvProviderInfo(VasaProviderInfoPersistenceManager.java:196)

        at com.vmware.vim.sms.provider.vasa.VasaProviderInfoPersistenceManager.cleanProvider(VasaProviderInfoPersistenceManager.java:167)

        at com.vmware.vim.sms.provider.vasa.VasaProviderImpl.rollbackRegistration(VasaProviderImpl.java:1299)

        at com.vmware.vim.sms.provider.vasa.VasaProviderImpl.init(VasaProviderImpl.java:1038)

        at com.vmware.vim.sms.provider.ProviderFactory.createVasaProvider(ProviderFactory.java:224)

        at com.vmware.vim.sms.provider.ProviderFactory.createProvider(ProviderFactory.java:170)

        at com.vmware.vim.sms.StorageManagerImpl.registerProviderInt(StorageManagerImpl.java:482)

        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

        at java.lang.reflect.Method.invoke(Method.java:498)

        at com.vmware.vim.sms.task.JobHandler.run(JobHandler.java:70)

        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)

        at java.util.concurrent.FutureTask.run(FutureTask.java:266)

        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)

        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

        at java.lang.Thread.run(Thread.java:748)

Caused by: com.vmware.vim.sms.fault.KvNotFoundException: VasaProviderInfo could not be found for the provider: 30893861-22c7-475e-aaf8-c79892fca586

        at com.vmware.vim.sms.kvstore.KvStorePersistenceManager.getVersionedObject(KvStorePersistenceManager.java:170)

        at com.vmware.vim.sms.kvstore.KvStorePersistenceManager.delete(KvStorePersistenceManager.java:153)

        at com.vmware.vim.sms.provider.vasa.VasaProviderInfoPersistenceManager.removeKvProviderInfo(VasaProviderInfoPersistenceManager.java:191)

        ... 16 more

2018-08-02T20:53:02.347Z [pool-11-thread-2] INFO  opId= com.vmware.vim.sms.StorageManagerImpl - Timer stopped: registerProviderInt, Time taken: 3261 ms.

2018-08-02T20:53:04.702Z [pool-17-thread-9] INFO  opId=vb-139:dam-auto-generated: StorageProvidersViewMediator:dr-75:SmsPropertyProvider:501-13249-ngc:70000497 com.vmware.vim.sms.StorageManagerImpl - Starting Timer: queryArray. Provider id: null

2018-08-02T20:53:04.710Z [pool-17-thread-9] INFO  opId=vb-139:dam-auto-generated: StorageProvidersViewMediator:dr-75:SmsPropertyProvider:501-13249-ngc:70000497 com.vmware.vim.sms.StorageManagerImpl - Timer stopped: queryArray, Time taken: 8 ms.

2018-08-02T20:53:04.715Z [pool-17-thread-10] INFO  opId=vb-139:dam-auto-generated: StorageProvidersViewMediator:dr-75:SmsPropertyProvider:501-13250-ngc:70000497 com.vmware.vim.sms.StorageManagerImpl - Starting Timer: queryProvider.

2018-08-02T20:53:04.715Z [pool-17-thread-10] INFO  opId=vb-139:dam-auto-generated: StorageProvidersViewMediator:dr-75:SmsPropertyProvider:501-13250-ngc:70000497 com.vmware.vim.sms.StorageManagerImpl - Timer stopped: queryProvider, Time taken: 0 ms.

2018-08-02T20:53:05.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:53:05.537Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 6 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:53:25.533Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:53:25.539Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 6 ms. Processed 0 TagAssociationInfo(s)

2018-08-02T20:53:38.319Z [pool-10-thread-1] INFO  opId=sps-SHPoller-231038-680 com.vmware.vim.sms.health.ServiceHealthPoller - Ran service health check

2018-08-02T20:53:45.531Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Starting Timer: DatastoreTagChangePoller.

2018-08-02T20:53:45.537Z [pool-7-thread-5] INFO  opId=sps-DTCPoller-231045-438 com.vmware.pbm.qs.listener.DatastoreTagChangePoller - Timer stopped: DatastoreTagChangePoller, Time taken: 6 ms. Processed 0 TagAssociationInfo(s)

Reply
0 Kudos
SupreetK
Commander
Commander
Jump to solution

Below are the errors we should be concerned about -

2018-08-02T20:52:53.821Z [pool-11-thread-1] ERROR opId= com.vmware.vim.sms.provider.vasa.VersionHandler - Exception while retrieving version info for provider (sms.fault.CertificateNotTrusted)

2018-08-02T20:53:02.141Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.provider.vasa.cert.CertificateAuthority - Failed to get a VMCA signed certificate for CSR. Error : 70012 Message : VMCA_INVALID_CSR_FIELD

2018-08-02T20:53:02.142Z [pool-11-thread-2] ERROR opId= com.vmware.vim.sms.provider.vasa.VasaProviderImpl - [init] Provider creation failed while getting a certificate.

com.vmware.vim.sms.fault.CertificateException: Failed to get a VMCA signed certificate for CSR. Error : 70012 Message : VMCA_INVALID_CSR_FIELD

Looks like the VASA provider registration workflow has changed with 6.7. Since 6.7 is relatively newer, not many storage vendors would have had a chance to work with this version. As you have a new setup, can you reinstall with 6.5 and check if the registration works? If not, involve VMware and EMC support for further assistance.

Please consider marking this answer as "correct" or "helpful" if you think your questions have been answered.

Cheers,

Supreet

Reply
0 Kudos