Unable to configure SSL for the Log Insight agent within vRealize Orchestrator's Control Center
search cancel

Unable to configure SSL for the Log Insight agent within vRealize Orchestrator's Control Center

book

Article ID: 345145

calendar_today

Updated On:

Products

VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Symptoms:
No option to enable SSL when configuring the VMware Log Insight Agent

Environment

VMware vRealize Orchestrator 7.5.x/7.6

Resolution

VMware is aware of this issue. Currently, there is no resolution.

Workaround:
  1. Login to the external vRealize Orchestrator Primary appliance node
  2. Open /etc/liagent.ini using an editor (e.g. vi)
  3. Change the line "ssl = no" to "ssl = yes"
  4. Add new line "ssl_accept_any = yes"
  5. Execute below command to store this change into vRO database:
    /var/lib/vco/tools/configuration-cli/bin/vro-configure.sh sync-local
  6. restart the vco-configurator service on all vRO replica nodes:
    service vco-configurator restart
Note: The vco-server service will automatically restart on all nodes. 

Example of file /etc/liagent.ini:

[server]
hostname = loginsight.rainpole.com
proto = cfapi
port = 9543
ssl = yes
ssl_accept_any=yes
[logging]
[storage]
[update]
package_type=rpm


Additional Information

Impact/Risks:
vRealize Orchestrator services will be restarted as part of this procedure.