VMware Cloud Community
RTX
Contributor
Contributor

Replace certificates fails on InventoryService

Tried to follow different guides (VM as well) but the most read able I found so far is this one

http://theithollow.com/2014/08/create-vmware-ssl-certificate-requests/

Using SSL-Updater tool from VMware

After a succesfully replacement of the SSO certificate and Update Inventory Service trust to Single Sign-On, the replacement of the InventoryService SSL fails with this

[.] The supplied certificate chain is valid.

[04-11-2014 - 11:45:34,77]: Last operation update Inventory Service SSL certificate failed :

[04-11-2014 - 11:45:34,77]: openssl.exe Cannot generate Inventory Service rui.pfx - errorlevel is 1

I have seen a few others having the same issue, but no solution, so I am trying to get help here.

So far I tried to :

• recreate certificate for the inventoryService without luck

• double-checked chain.pem and rui.crt files for illegal spaces etc.

Any suggestion what to do now.

Reply
0 Kudos
2 Replies
centcal74
Contributor
Contributor

I was running into the same thing and finally got it to go through successfully.  Windows - I think maybe notepad adds a bunch of ^M  to the certificate files.  I opened up the files in VI on a Linux machine and removed them from the files with :%s/^M//g   and the way to input that is :%s/ ctrl+v then ctrl+m //g and write the file back.  Once I cleared all those from the downloaded cert from my Microsoft CA the Inventory Service installed the SSL certs successfully...finally.  Was driving me MAD!

Reply
0 Kudos
TheITHollow
Enthusiast
Enthusiast

I ran into a similar issue and a possible resolution can be found here: theITHollow.com Error Generating PFX

I hope this helps.

http://www.theithollow.com
Reply
0 Kudos