run certificate-manager display ERROR while creating backup cert file for MACHINE_SSL_CERT

[a365541453]

when I run certificate-manager return ERROR while creating backup cert file for MACHINE_SSL_CERT

I tried KB67660 ，but no effect

and I try another method vecs-cli failed. Error 4312  ，the end it was not resolved

VCSA：6.5 （cluster have vSAN，so I don't want re-install VCSA）

thanks

[msripada]

have you tried the steps in Kb https://kb.vmware.com/s/article/67660

thanks,

MS

[a365541453]

The first method I tried was this and it didn't work

tks

[Lalegre]

Hey @a365541453,

Please attach here the log from here: /var/log/vmware/vmcad/certificate-manager.log

Question, for the KB that you have tried, was the folder actually missing? If you created the folder did you set any permissions?

Be sure to have the next permissions: 

If you do not have those permissions please run the next command: chmod 755 /var/tmp/vmware

[a365541453]

Hey @Lalegre 

/var/tmp /vmware  permissions is 755

I think it might be the reason why MACHINE_SSL_CERT was deleted

certificate-manager.log

2021-02-03T08:27:34.794Z INFO certificate-manager Running command :- ['/usr/lib/vmware-vmafd/bin/vecs-cli', 'entry', 'getcert', '--store', 'MACHINE_SSL_CERT', '--alias', '__MACHINE_CERT', '--output', '/var/tmp/vmware/old_machine_ssl.crt']
2021-02-03T08:27:34.804Z INFO certificate-manager Command output :-

2021-02-03T08:27:34.805Z ERROR certificate-manager

[Lalegre]

Hey @a365541453,

What if you try to only reset the Machine SSL certificate? Maybe if you choose that option it could give you more insight of what is happening. Once you have the Self-signed one you can try do replace with a Custom one if that is what you want to achieve.

You can follow the next procedure to start clean: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.psc.doc/GUID-87E0E135-26FA-4FA4-8134-33D298...