vRealize Orcestrator (vRO) is unable to read/write to the keystore file located at /etc/vco/app-server/security/jssecacerts

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:

• vRealize Orchestrator (vRO) is unable to read/write to the keystore file /etc/vco/app-server/security/jssecacerts to verify SSL certificates.
• The following error appears in server.log
  • java.lang.RuntimeException: java.security.KeyStoreException: Uninitialized keystorejava.security.KeyStoreException: Uninitialized keystoreUninitialized keystore"

Environment

VMware vRealize Orchestrator 7.x

Cause

The keystore file has been left in an invalid state.

Resolution

This is a known issue impacting vRealize Orchestrator (vRO) 7.3. It is fixed in version 7.3.1 and 7.4.

Workaround:
Restore the local keystore file with a backup copy. Backups of the configurations are stored in /var/lib/vco/backup directory in the form of zip files.

1. Locate recent configuration backup from /var/lib/vco/backup directory
2. Unzip it and get jssecacerts file from the unzipped configuration backup (/app-server/conf/security/jssecacerts)
3. Initiate stop of vco-server and vco-configuration services
   service vco-server stop
   service vco-configurator stop
4. Replace the current keystore file with the backed up copy
   The current keystore file is located in /var/lib/vco/app-server/conf/security/jssecacerts
5. Start the vco services
   service vco-server start
  service vco-configurator start