Smarts NCM: Receive "Certificate not imported alias selfsigned already exists" when trying to import SSL certificate to standalone Report Advisor server

Products

• VMware Smart Assurance

Issue/Introduction

Symptoms:


Cannot import SSL certificate to Report Advisor server

When following the instructions in the Smarts NCM installation guide to 'Establish a secure connection with Report server', an error is reported when trying to import the certificate and the import process cannot be completed as shown in the following:
 

[root@ncm-1 1vc.sar]# /usr/java/jdk1.6.0_45/bin/keytool -export -keystore /opt/smarts-ncm/jboss/server/vc-server/deploy/1vc.sar/voyence-ssl.keystore -alias selfsigned -file test1

Enter keystore password:

 

*****************  WARNING WARNING WARNING  *****************

* The integrity of the information stored in your keystore  *

* has NOT been verified!  In order to verify its integrity, *

* you must provide your keystore password.                  *

*****************  WARNING WARNING WARNING  *****************

 

keytool error: java.lang.Exception: Certificate not imported alias <selfsigned> already exists

 

Environment

VMware Smart Assurance - NCM

Cause

This error usually occurs the second time the import option is run. As part of the keystore import process, the old keystore is not deleted before the new one is inserted.

Resolution

If you encounter this issue, do the following:

1. Run the following command to list the certs currently in the keystore named 'selfsigned':

keytool  list  keystore cacert  storepass changeit | grep selfsigned

 

2. Run the following command to remove the cert from the keystore named 'selfsigned':

keytool  delete  alias selfsigned  keystore cacerts

3. Once the old key is removed, run the keytool -import option again.

Additional Information

Related Article: 173965