Renew Custom Expired Certificate - Snapshot through Aria Lifecycle/vRLCM fails and takes Aria Operations/vROPS down. The error in the Aria Lifecycle/vRLCM UI LCMVROPSYSTEM25013

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Login via Admin on all (GUI & Admin) fails, it displays the following error:  Bad username or bad password in Aria Operations.
  
  
• When Trying to reset the password (root access ok) in Aria Operations node, it will fail due the message below:

$VMWARE_PYTHON_BIN $VCOPS_BASE/../vmware-vcopssuite/utilities/sliceConfiguration/bin/vcopsSetAdminPassword.py --reset
Password:
Re-enter Password:
Saved existing admin user credentials into backup file
WARNING:root:Open URL: 'https://localhost/casa/cluster/security/adminpassword/initial/localhost' failed with a URLERROR returned reason: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1006), exception: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1006)>
Original admin credentials restored from backup

• The Admin user in Aria Operations is not either locked or expired.
  
  
•  The error in the Aria Lifecycle/vRLCM UI:

LCMVROPSYSTEM25013.

VMware Aria Operations login failure for  'admin' user. 

Provide correct credentials and confirm that VMware Aria Operations cluster status is online. 

Unauthorized access to VMware Aria Operations.

Environment

Aria Operations 8.18.x.

Cause

• Web certificate in Aria Operations is expired.
• Expired certificate on VMware Aria Suite products can't be replaced using VMware Aria Suite Lifecycle.

Resolution

1. Take Aria Operations instance offline via administration interface.
2. When all Aria Operation node(s) show offline, take snapshots without memory.
3. Try steps from KB Reload the default certificate in Aria Operations
4. Proceed replacing custom certificate in Aria Lifecycle.