Certificate operations in SDDC Manager fail with "Error writing trusted certificate configuration APPLIANCE_TRUST_STORE_CREATION_FAILURE "

Products

• VMware SDDC Manager

Issue/Introduction

• Adding or removing certificates while registering or de-registering product will fail
• Common services logs contain the following exception

   "Error writing trusted certificate configuration APPLIANCE_TRUST_STORE_CREATION_FAILURE Not able to create trust store AccessDeniedException: /etc/vmware/vcf/commonsvcs/trusted_certificates.store.new" 

Cause

 A file was manually created with the name trusted_certificates.store.new or cacerts.new in /etc/vmware/vcf/commonsvcs and vcf_commonsvcs:vcf has no permissions to write to the file 

Resolution

1. Take a snapshot of SDDC manager
2. Open an SSH session to the SDDC Manager.
3. Locate and delete the problematic file depending on the exception, i.e. either delete /etc/vmware/vcf/commonsvcs/trusted_certificates.store.new or /etc/vmware/vcf/commonsvcs/cacerts.new