VMware PSC certifate

[dharmendrarhce]

I have updated VMware PSC root ssl certifate using vcenter web GUI.

After updating certifate i am unable to login other Vcenter .

Getting errror . Error details in the attchmenat.

Someone can help pls .

[MohamadAlhousse]

hi dharmendrarhce​,

Please can we know the version of the PSC controller and whether you have PSCs running in HA mode or just a single external PSC ?

Regards,

[dharmendrarhce]

We are using 6.5 version and it is single machine .

[RajeevVCP4]

To work around this issue if you are unable to upgrade, copy the /usr/lib/vmware-sso/bin/UpdateLsEndpoint.py file from 6.5 GA for updating the end points.

Vmware KB 2150779

[dharmendrarhce]

Ok. is you mean to say that I have to copy the other file from my PSC server to vcenter server in the same location ??

[RajeevVCP4]

For further checking please attach recent

vsphere_client_virgo.log

and time stamp when issue occurred

[Vijay2027]

Is this PSC behind a LB setup?

[Yuva_1990]

Customer mentioned that psc is a single machine ideally there should not be load balancer

[Yuva_1990]

Can you help us with the exact version of the psc and Vcenter

Regards

Yuvaraj

[dharmendrarhce]

We have 1 PSC 6.5 Machine with out LB and that is connected with one vcenter 6.5 appliance .

I have root & machine SSL CA certificate . After SSL certificate update We are unable to login in the vcenter

any help ?

[MohamadAlhousse]

Hi dharmendrarhce​

This error appears if the key length of the root CA is greater than 2048. Keys with 4096 and greater length are causing issues.

If you have a Microsoft CA you can do the following to resolve your issue:

1. Create a CAPolicy.inf in C:\Windows

2. In the CAPolicy.inf put:

     [Certsrv_Server]

     RenewalKeyLength=2048

     RenewalValidityPeriod=Years

     RenewalValidityPeriodUnits=10

3. Renew the CA root certificate and accept regenerating the key and you’re done.

4. Reset PSC and VCSA certificate and import the new generated SSL certificates again.

Regards,

Mohamad