To resolve this issue, import the vIDM certificate into the vRealize Log Insight truststore.
- Navigate to vIDM in a web browser and export the certificate from the browser as vidmcert.crt.
- Copy the certificate file to the /tmp directory on each vRealize Log Insight node using an SCP Utility.
- Log into the vRealize Log Insight Primary node as root via SSH or Console, pressing ALT+F1 in a Console to log in.
- Import the certificate into the truststore:
/usr/java/default/bin/keytool -import -alias VIDMCertificate -file /tmp/vidmcert.crt -keystore /usr/java/default/lib/security/cacerts -storepass changeit -noprompt
- Repeat steps 3 and 4 on all nodes in the vRealize Log Insight cluster.
- In the vRealize Log Insight UI, navigate to Configuration > Authentication > Authentication Configuration, then test and save the vIDM integration.
Workaround:
If the vIDM certificate is not able to be imported into the truststore, the following workaround can be used.
- Download the cacerts file attached to this article.
- Copy cacerts to the /usr/java/default/lib/security/ directory on each node in the vRealize Log Insight cluster, overwriting the existing file, using an SCP Utility.
- Log into the vRealize Log Insight Primary node as root via SSH or Console, pressing ALT+F1 in a Console to log in.
- Run the following command to log into the Cassandra database by running this command:
CASSANDRAUSER="$(/usr/lib/loginsight/application/lib/apache-cassandra-3.11.2/bin/credentials-look-up| grep "user value=" | awk -F'"' '{print $2}')"; CASSANDRAPASSWORD="$(/usr/lib/loginsight/application/lib/apache-cassandra-3.11.2/bin/credentials-look-up| grep "password value=" | awk -F '"' '{print $2}')"; /usr/lib/loginsight/application/lib/apache-cassandra-3.11.2/bin/cqlsh -u $CASSANDRAUSER -p $CASSANDRAPASSWORD
- Run the following command to truncate the logdb.ca_certs_v3 table:
truncate logdb.ca_certs_v3;
- Exit Cassandra by running the following:
exit
- Restart the loginsight service:
service loginsight restart
- Repeat steps 3-8 on all nodes in the vRealize Log Insight cluster.
- In the vRealize Log Insight UI, navigate to Configuration > Authentication > Authentication Configuration, then test and save the vIDM integration.