Highlighted
Contributor
Contributor

Error when replacing the SSL certificate for Vcenter

good day. My name is Dmitry. I use Vcenter 6.7 c VCSA. The original certificate that was signed from a single MS CA certificate authority expires.
A new PKI infrastructure is installed (isolated root CA-Issuer Enterprise-when installing Issuer and creating a new key, the use 4096 bit+SHA256 option was selected). Now you need to issue a certificate chain (VCSA cert+Subordinate Cer+RootCert).
I tried several ways to install an SSL certificate in VCSA + according to your article and for some reason I always get this error:

Please provide valid custom certificate for Machine SSL.
File : /tmp/vmca_issued_csr.cer

Please provide valid custom key for Machine SSL.
File : /tmp/vmca_issued_key.key

Please provide the signing certificate of the Machine SSL certificate
File : /tmp/PS-CA.cer

You are going to replace Machine SSL cert using custom cert
Continue operation : Option[Y/N] ? : Y
Command Output: /tmp/vmca_issued_csr.cer: OK

Get site nameCompleted [Replacing Machine SSL Cert...]
default-site
Lookup all services
Get service default-site:0f1ea8f1-f266-4a95-9f3b-a6c7c09af1e9
Update service default-site:0f1ea8f1-f266-4a95-9f3b-a6c7c09af1e9; spec: /tmp/svcspec_mepyimhx
Status : 0% Completed [Operation failed, performing automatic rollback]

Error while replacing Machine SSL Cert, please see /var/log/vmware/vmcad/certificate-manager.log for more information.

Performing rollback of Machine SSL Cert...
Get site nameus : 0% Completed [Rollback Machine SSL Cert...]
default-site
Lookup all services
Get service default-site:0f1ea8f1-f266-4a95-9f3b-a6c7c09af1e9
Update service default-site:0f1ea8f1-f266-4a95-9f3b-a6c7c09af1e9; spec: /tmp/svcspec_pqw9xdyk

0 Kudos
1 Reply
Highlighted
VMware Employee
VMware Employee

@RenUser 

Moderator: Moved to vCenter Server Discussions

Please do not create multiple threads on the same topic - the other two threads you created have been archived.

0 Kudos