To resolve the issue, complete the steps below to apply the certificate to the new worker node depending on the version you're on.
See
VMware Aria Operations for Logs 8.12 for VMware Aria Operations for Logs 8.12, or
vRealize Log Insight 8.10.x or Below for versions 8.10.x or below.
Quick Links:
This issue was resolved in the latest patched release of VMware Aria Operations for Logs 8.12 released 05/01/2023 (Displayed date 04/20/2023), build number 21696970 available at
VMware Downloads.
If you are running on the original VMware Aria Operations for Logs 8.12 release (21618456) it is recommended to upgrade to the newly released 8.12 build.
If you are unable to upgrade to the latest patched release of VMware Aria Operations for Logs 8.12, you can instead use the resolution below.
Quick Links:
- Download the extract_cert.tar file attached to this article form the Attachments section on the right.
- Using an SCP utility like WinSCP, copy the extract_cert.tar file to the /tmp directory on the Primary node.
- Log into the Primary node as root via SSH or Console.
- Run the following command to change to the /tmp directory:
cd /tmp
- Run the following command to extract the script from extract_cert.tar:
tar xf extract_cert.tar
- Run the following command to update the permissions of the script:
chmod 744 extract_cert.sh
- Run the following command to run the extrct_cert.sh script:
./extract_cert.sh
Note: The script will create custom.pem in the /tmp folder. You should see output similar to:
- Using an SCP utility like WinSCP, copy the /tmp/custom.pem file from the Primary node to the /usr/lib/loginsight/application/etc/certs directory on the new Worker node.
- Log into the new Worker node as root via SSH or Console.
- Run the following command to stop loginsight service:
systemctl stop loginsight
- Run following command to apply the custom.pem certificate to the new Worker node:
/usr/lib/loginsight/application/sbin/custom-ssl-cerf
- Run the following command to start loginsight service:
systemctl start loginsight
Quick Links:
- Download the extract_cert.tar file attached to this article form the Attachments section on the right.
- Using an SCP utility like WinSCP, copy the extract_cert.tar file to the /tmp directory on the Primary node.
- Log into the Primary node as root via SSH or Console.
- Run the following command to change to the /tmp directory:
cd /tmp
- Run the following command to extract the script from extract_cert.tar:
tar xf extract_cert.tar
- Run the following command to update the permissions of the script:
chmod 744 extract_cert.sh
- Run the following command to run the extrct_cert.sh script:
./extract_cert.sh
Note: The script will create custom.pem in the /tmp folder. You should see output similar to:
- Using an SCP utility like WinSCP, copy the /tmp/custom.pem file from the Primary node to the /usr/lib/loginsight/application/etc/certs directory on the new Worker node.
- Follow the Install Certificate steps in Replace expired internal certificate in vRealize Log Insight (92080) to install the certificate on the new Worker node.