Unable to modify LDAPs Identity source configurations in vCenter server

Products

• VMware vCenter Server

Issue/Introduction

While updating an existing, the following error message is thrown:

 Cannot configure identity source due to 'IdentityStore certificates' value should not be empty.

 

Environment

• VMware vCenter Server 7.x
• VMware vCenter Server 8.x

Cause

This issue is caused as there is already a Identity source available.

Resolution

• Remove the existing Identity source and then add the new information.

 

Note: Do not restart the vCenter server system or restart the VMDIRD after removal of identity source.

 

Additional Information

Configuring a vCenter Single Sign-On Identity Source using LDAP with SSL (LDAPS)

• If an existing identity source exists with the same domain, that identity source will have to be removed before configuring an LDAPS identity source.
• If updating or replacing the SSL certificate, the identity source must be removed and re-added. 

Impact/Risks:

There is no Impact from this issue.