Reload the default certificate in vRealize/Aria Operations (vROps)

Products

• VMware Aria Suite

Issue/Introduction

This article provides steps to reload the default web certificate in vRealize/Aria Operations in case issue are experienced any time after a custom certificate is uploaded.

Symptoms:
After a  custom web certificate has been installed from the Admin UI, you may experience one or more of the following issues:

• You can no longer access the Admin UI or Product UI.
• One or more nodes reports as Inaccessible in the Admin UI.
• The /var/log/apache2/error.log reports errors similar to:

[error] Unable to configure RSA server private key
SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

• Upgrading Aria Operations fails with error "Upload Failed" when checking the expiry date of the web certificate it shows as expired stopping the upgrade from completing. 

Environment

VMware vRealize Operations 8.x

Aria Operations 8.12 and later

Resolution

To rollback to the default certificates perform these steps:

1. Log into the Primary node as root via SSH or Console, press ENTER in the Console to log in.
2. Run the following commands to reload the default certificate:

vRealize/Aria Operations 8.x

• unset -f pathappend pathprepend pathremove
• $VMWARE_PYTHON_BIN /usr/lib/vmware-casa/bin/activate_web_certificate.py DEFAULT
• $VMWARE_PYTHON_BIN /usr/lib/vmware-vcopssuite/utilities/bin/restartHttpd.py

 

Note: The unset commands are required as a result of the python version differences from 6.x/7.x to 8.x to avoid errors similar to:

bash: error importing function definition for `pathprepend'
bash: pathremove: line 1: syntax error: unexpected end of file
bash: error importing function definition for `pathremove'
bash: pathappend: line 1: syntax error: unexpected end of file the below errors

 

3. Repeat steps 1 - 2 on all nodes in the vRealize/Aria Operations cluster.

Additional Information

If you are still unable to access the Product UI or Admin UI after performing these steps, please open a
Support Request.
For more information on opening a Support Request see Creating and managing Broadcom support cases  

For more information on creating certificates for vRealize/Aria Operations, see Configure a Certificate For Use With VMware Aria Operations