After replacing/renewing the vCenter server machine SSL certificate, Aria Operations for Logs stops collecting logs
Article ID: 381451
Updated On:
Products
Issue/Introduction
After replacing vCenter Server's machine SSL certificate, Aria Operations for Logs failed to connect to vCenter Server and also failed to collect event/log from vCenter Server.
You may see SSLHandshake errors in /var/log/vmware/loginsight/plugins/vsphere/li-vsphere.log:
["pool-11-thread-2"/###.###.##.## ERROR] [com.vmware.loginsight.vsphere.events.VimEventMonitor] [[https://###.###.##.##/sdk] Exception: 'HTTP transport error: javax.net.ssl.SSLHandshakeException' was thrown while trying to establish connection. Rethrowing exception.]
["pool-11-thread-2"/###.###.##.## ERROR] [com.vmware.loginsight.vsphere.events.VimEventMonitor] [[###.###.##.##] Failed to Monitor VimEvents]
com.sun.xml.ws.client.ClientTransportException: HTTP transport error: javax.net.ssl.SSLHandshakeException
at com.sun.xml.ws.transport.http.client.HttpClientTransport.getOutput(HttpClientTransport.java:102) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.transport.http.client.HttpTransportPipe.process(HttpTransportPipe.java:193) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.transport.http.client.HttpTransportPipe.processRequest(HttpTransportPipe.java:115) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.transport.DeferredTransportPipe.processRequest(DeferredTransportPipe.java:109) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:1106) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.api.pipe.Fiber._doRun(Fiber.java:1020) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.api.pipe.Fiber.doRun(Fiber.java:989) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.api.pipe.Fiber.runSync(Fiber.java:847) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.client.Stub.process(Stub.java:433) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.client.sei.SEIStub.doProcess(SEIStub.java:161) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:78) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:62) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:131) ~[jaxws-rt-2.3.3.jar:2.3.3]
at com.sun.proxy.$Proxy97.retrieveServiceContent(Unknown Source) ~[?:?]
at com.vmware.loginsight.vsphere.events.VimEventMonitor$VimAdapter.connect(VimEventMonitor.java:269) ~[vsphere-lib.jar:?]
at com.vmware.loginsight.vsphere.events.VimEventMonitor$VimAdapter.access$1800(VimEventMonitor.java:244) ~[vsphere-lib.jar:?]
at com.vmware.loginsight.vsphere.events.VimEventMonitor.connect(VimEventMonitor.java:786) ~[vsphere-lib.jar:?]
at com.vmware.loginsight.vsphere.events.VimEventMonitor.collectEvents(VimEventMonitor.java:806) ~[vsphere-lib.jar:?]
at com.vmware.loginsight.scheduled.ScheduledPluginService$ScheduledPluginServiceImpl.fetchEventsFromVsphere(ScheduledPluginService.java:841) ~[scheduled-services.jar:?]
at com.vmware.loginsight.scheduled.ScheduledPluginService$ScheduledPluginServiceImpl.lambda$executeVsphereCollection$1(ScheduledPluginService.java:596) ~[scheduled-services.jar:?]
at java.util.concurrent.FutureTask.run(Unknown Source) [?:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:?]
at java.lang.Thread.run(Unknown Source) [?:?]
Environment
VMware Aria Operations for Logs 8.X
Cause
After replacing the vCenter Server machine SSL certificate, Aria Operations for Logs is unable to connect to the integrated vCenter Server unless it accepts a new SSL certificate.
Resolution
Accept new SSL certificate and check if "VC Collection Status" becomes "Collecting".
1. Log in to the Aria Operations for Logs administration console.
2. Navigate to [Integration] -> [vSphere] and click the error icon under [VC Collection Status].
3. Click [Accept] in the pop-up window.
Feedback
