SSL certificates are expired for Aria Operations for Logs (Formerly Log Insight)

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• The certificates have expired for Aria Operations for Logs.
• The UI is not accessible
• Cassandra is down on some or all of the nodes.
  • Use the command below to test.

    nodetool-no-pass status

  • 'Cassandra is not running' will be returned.
• SCP to one or all nodes is not possible.

Environment

Aria Operations for logs 8.16 and later.

Cause

The certificates have expired, causing the Cassandra cluster to fail.

Resolution

1. Log into the Primary node as root via SSH or Console.
2. Run the following commands to navigate to the certs directory and make a copy of the default certificate and rename it to custom.pem.

   cd /usr/lib/loginsight/application/etc/certs
   cp default.pem custom.pem

3. Run the following command to use the custom-ssl-cerf script:

   /usr/lib/loginsight/application/sbin/custom-ssl-cerf

4. Repeat steps 2 and 3 on all remaining nodes in the cluster
5. Run the following command to restart the loginsight service on all nodes, one at a time

   systemctl restart loginsight

Note: Once the service has restarted, wait a few minutes, check that the Loginsight service is running by running the command service loginsight status, then proceed to restart the service on the next node.

Additional Information

The steps above use the default certificate saved on the appliances. It is useful in cases where SCP cannot be used to move a certificate, as per the KB below;

• Install custom certificates