The vCenter Inventory service fails to start after installing custom certificates

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

After replacing the default vCenter Server 5.0 certificates with custom certificates, you experience these symptoms:

• The vCenter Inventory service fails to start.
• In the C:\ProgramData\VMware\Infrastructure\Inventory Service\Logs\ds.log file, you see entries similar to:
  
  [2012-02-15 17:09:13,474 WrapperListener_start_runner FATAL com.vmware.vim.dataservices.WrapperListenerImpl] Error starting service:
  org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'vlsi-server' defined in class path resource [server/config/server-config.xml]: Cannot create inner bean 'com.vmware.vim.vmomi.server.http.impl.ServiceImpl#2be2befa' of type [com.vmware.vim.vmomi.server.http.impl.ServiceImpl] while setting bean property 'services' with key [0]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'com.vmware.vim.vmomi.server.http.impl.ServiceImpl#2be2befa' defined in class path resource [server/config/server-config.xml]: Cannot resolve reference to bean 'queryservlet' while setting bean property 'servlet'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'queryservlet' defined in class path resource [server/config/query-server-config.xml]: Cannot create inner bean 'com.vmware.vim.query.server.servlets.QueryProcessor#3f64b09c' of type [com.vmware.vim.query.server.servlets.QueryProcessor] while setting bean property 'processor'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'com.vmware.vim.query.server.servlets.QueryProcessor#3f64b09c' defined in class path resource [server/config/query-server-config.xml]: Cannot resolve reference to bean 'service' while setting bean property 'service'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sdProvider' defined in class path resource [server/config/query-server-config.xml]: Cannot resolve reference to bean 'sdReconfig' while setting bean property 'watcher'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'sdReconfig' defined in class path resource [server/config/query-server-config.xml]: Cannot resolve reference to bean 'service' while setting bean property 'service'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'service' defined in class path resource [server/config/query-server-config.xml]: Cannot resolve reference to bean 'providermgr' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'providermgr' defined in class path resource [server/config/provider-config.xml]: Invocation of init method failed; nested exception is java.lang.IllegalStateException: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'vpx' defined in class path resource [server/config/provider-config.xml]: Invocation of init method failed; nested exception is java.io.IOException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded

Environment

VMware vCenter Server 5.1.x
VMware vCenter Server 5.0.x

Cause

This issue occurs if the password testpassword was not used while creating the custom certificates.

Resolution

This is a known issue affecting VMware vCenter Server 5.0.x. Currently, there is no resolution.

To workaround this issue, recreate the custom certificates and place in the correct location:

1. Recreate the custom certificates using the password testpassword. For more information, see Generating custom or default SSL certificates (1029944).
2. Place the newly created certificates in the correct locations. For more information, see Certificate warning is reported even after replacing vCenter Server 5.0 default SSL certificates with custom SSL certificates (2009857).

Additional Information

Certificates for the Inventory Service must be placed the C:\Program Files\VMware\Infrastructure\Inventory Service\ssl folder.

Generating custom or default SSL certificates
Certificate warning is reported even after replacing vCenter Server 5.0 default SSL certificates with custom SSL certificates
カスタム証明書のインストール後に vCenter Inventory Service を起動することに失敗する