Renew Machine SSL certificate failure

Products

• VMware vCenter Server
• VMware vCenter Server 7.0

Issue/Introduction

• Renew Machine SSL certificate failure on Certificate Management/vSphere Client.
  Unexpected error occurred while renewing certificates
  
  
• Exception handled while processing request for /ui/certificate-ui/ctrl/certificates/renew-machine-cert message in vSphere Client log.
  /var/log/vmware/vsphere-ui/logs/vsphere_client_virgo.log:
  [YYYY-MM-DDTHH:MM:SS Z] [ERROR] http-nio-5090-exec-222        com.vmware.vise.mvc.exception.GlobalExceptionHandler              Exception handled while processing request for /ui/certificate-ui/ctrl/certificates/renew-machine-cert:  com.vmware.vapi.std.errors.ServiceUnavailable: ServiceUnavailable (com.vmware.vapi.std.errors.service_unavailable) => {
      messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => {
      id = com.vmware.vapi.endpoint.cis.ServiceUnavailable,
      defaultMessage = Service unavailable.,
      args = [],
      params = <null>,
  
  

 

Environment

VMware vCenter Server 7.0

Cause

Observe out of memory logs in certificate management.

Error in /var/log/vmware/certificatemanagement/certificatemanagement-runtime.log.stderr:

MM DD, YYYY HH:MM:SS PM org.apache.coyote.AbstractProtocol$ConnectionHandler process
SEVERE: Failed to complete processing of a request
java.lang.OutOfMemoryError: Compressed class space

Resolution

This issue is resolved in: vCenter Server 7.0 Update 3 or later.

Workaround: 
Restarting the vmware-certificatemanagement service,
service-control --restart vmware-certificatemanagement

Additional Information

• Stopping, Starting or Restarting appliance services