Error "unable to get local issuer certificate" while forwarding logs from Windows OS to "Aria Operations for Logs" via Cloud proxy.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Log forwarding from Aria Log agent (Windows OS) to "Aria Operations for Logs" via Cloud Proxy(Log Forwarding enabled) fails with an Error "unable to get local issuer certificate".

C:\ProgramData\VMware\Log Insight Agent\log:

2025-01-15 12:44:53.559026 0x00002ff0 <trace> CFApiTransport:128 | Re-connecting to server CloudProxy_IP:Port
2025-01-15 12:44:53.575855 0x00002ff0 <warng> SSLVerifyContex:165| Certificate pre-verify error = 20 while trying connect to 'CloudProxy_IP'. unable to get local issuer certificate

Environment

Aria Operations for Logs 8.18.x

Cloud Proxy 8.18.x

Cause

 Root Certificate of "Aria Operations for Logs" missing on Cloud Proxy causing Cloud Proxy to fail to connect with Aria Logs.

Resolution

Follow the instructions provided in Section 2 of below KB article to add Root CA certificate of "Aria Operations for Logs" to Cloud Proxy.

Add root CA certificate to Cloud Proxy after deployment