VCSA - SSL certificated expired

[SZU IT Support]

Hi everyone,

Our SSL certificate for our VCSA expired 4 days ago. I ran the cert manager via SSH and initiated the replacement.

That process failed at 85% and the roll back also failed. However it was able to install a new certificate valid for the next two years.

I did a reboot after that and i was able to login with my personal admin account to the vCenter UI. But i cannot see anything in the inventory.

If i check the certificate management, i get the following error and only the STS is showing as valid until 2030: 

Error occurred while fetching machine certificates: com.vmware.vcenter.certificate_management.vcenter.tls

On SSH level, i tried to stop and start all services with the following command:

service-control --stop --all && service-control --start --all

It also fails after a while with this error:

Successfully started service vmware-vmon

Service-control failed. Error: Failed to start services in profile ALL. RC=2, stderr=Failed to start vpxd, hvc, vpxd-svcs services. Error: Service crashed while starting

Any suggestions how i should proceed here?

Any help is appreciated.

Thank you

[ChrisLeblanc]

Try using this. You would need to put in the shell and chmod +x

This is from VMWare Support (I think latest, just got an update from an SR)

It's been a godsend when i'm doing cert work on a VCSA

[ChrisLeblanc]

You will need to take off the .txt. I had to add that to upload for you.

[Alex_Romeo]

Hi,

Did you run this KB: "https://knowledge.broadcom.com/external/article?legacyId=2112283".

Did you check with "df-h" if there is any disk full?

Thank you

Alex_Romeo

[tayfundeger]

Disk fullness can cause this problem. Also, if you enter the vmca name incorrectly while creating the certificate, this will also cause you to get an error.