Failed to download a successfully generated CSR from a SDDC Manager UI

Products

• VMware SDDC Manager

Issue/Introduction

Symptoms:

 

• Downloading CSR failed after a CSR was successfully generated from SDDC Manager with the following error: Failed to download Certificate(s). Http failure response for https://<SDDC_FQDN>/ui/api/security/csrs/sddc-domains/<Workload_Name>: 500 Internal Server Error

 

•  operationsmanager.log contains errors similar to the excerpt below:

2024-03-23T09:20:24.405+0000 ERROR [vcf_om,c02dcf6cd5874304,99c2] [c.v.v.c.s.f.i.CertificateOperationsFacadeImpl,http-nio-127.0.0.1-7300-exec-5] Failed to Download CSRs <Workload_Name>
com.vmware.vcf.certmgmt.common.exception.CertificateManagementException: Compression operation failed.
        at com.vmware.vcf.certmgmt.util.files.FileUtils.compressFolder(FileUtils.java:213)
        at com.vmware.vcf.certmgmt.service.facade.impl.CertificateOperationsFacadeImpl.getArchivedCSR(CertificateOperationsFacadeImpl.java:887)
        at com.vmware.vcf.certmgmt.service.facade.impl.CertificateOperationsFacadeImpl$$FastClassBySpringCGLIB$$31f7dbc3.invoke(<generated>)
        at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:218)
        

Environment

VMware Cloud foundation 5.x
VMware Cloud Foundation 4.x

Cause

A presence of stale CSRs inside "/opt/vmware/vcf/operationsmanager/certificates/<domain_name>" of the SDDC Manager.

Resolution

1) Snapshot the SDDC Manager 
2) Clean the directory inside "/opt/vmware/vcf/operationsmanager/certificates/<domain_name>"
3) Reboot the SDDC Manager
4) Regenerate the CSR and download once more.