a365541453
Contributor
Contributor

run certificate-manager display ERROR while creating backup cert file for MACHINE_SSL_CERT

when I run certificate-manager return ERROR while creating backup cert file for MACHINE_SSL_CERT

I tried KB67660 ,but no effect

and I try another method vecs-cli failed. Error 4312  ,the end it was not resolved

VCSA:6.5 (cluster have vSAN,so I don't want re-install VCSA)

thanks

 

 

20210203163923.jpg20210203163949.jpg

0 Kudos
5 Replies
msripada
Virtuoso
Virtuoso

have you tried the steps in Kb https://kb.vmware.com/s/article/67660

thanks,

MS

0 Kudos
a365541453
Contributor
Contributor

The first method I tried was this and it didn't work

tks

0 Kudos
Lalegre
Commander
Commander

Hey @a365541453,

Please attach here the log from here: /var/log/vmware/vmcad/certificate-manager.log

Question, for the KB that you have tried, was the folder actually missing? If you created the folder did you set any permissions?

Be sure to have the next permissions: 

Lalegre_0-1612423171042.png

If you do not have those permissions please run the next command: chmod 755 /var/tmp/vmware

 

a365541453
Contributor
Contributor

Hey @Lalegre 

/var/tmp /vmware  permissions is 755

I think it might be the reason why MACHINE_SSL_CERT was deleted

certificate-manager.log

2021-02-03T08:27:34.794Z INFO certificate-manager Running command :- ['/usr/lib/vmware-vmafd/bin/vecs-cli', 'entry', 'getcert', '--store', 'MACHINE_SSL_CERT', '--alias', '__MACHINE_CERT', '--output', '/var/tmp/vmware/old_machine_ssl.crt']
2021-02-03T08:27:34.804Z INFO certificate-manager Command output :-

2021-02-03T08:27:34.805Z ERROR certificate-manager

0 Kudos
Lalegre
Commander
Commander

Hey @a365541453,

What if you try to only reset the Machine SSL certificate? Maybe if you choose that option it could give you more insight of what is happening. Once you have the Self-signed one you can try do replace with a Custom one if that is what you want to achieve.

You can follow the next procedure to start clean: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.psc.doc/GUID-87E0E135-26FA-4FA4-8134-33D298...

0 Kudos