After replacing the certificate for VMware Identity Manager (vIDM), users are unable to log in to Aria Operations. Instead of successful authentication, users encounter the error message: "vIDM state is disconnected."
Environment
VMware Aria Operations 8.x
Cause
This issue is caused by Aria Operations not accepting the updated vIDM certificate in the Authentication Sources configuration. When the certificate is replaced on vIDM, Aria Operations continues to use the old certificate, leading to the "vIDM state is disconnected" error.
Resolution
To resolve the issue, follow these steps to test and accept the new certificate:
In Aria Operations, go to the left menu and click on Administration.
In the Administration panel, click the Control Panel.
Click on the Authentication Sources tile to open the authentication settings.
Click Edit to modify the Authentication Sources configuration.
Click Test to initiate a connection test. This will prompt Aria Operations to ask for the new certificate.
Please review the following article if the connection Test fails with a 'vIDM source connection test failed' error.
When prompted, click Accept to accept the new vIDM certificate.
Save the changes to the Authentication Sources configuration.
Retry logging in with your vIDM credentials. The login should now be successful.
Additional Information
Ensure that the vIDM certificate is correctly configured and trusted in the Authentication Sources.
If the issue persists, verify that the certificate chain is properly configured and that any intermediate certificates are also trusted.