OpenSearch service not starting on vIDM Nodes and one of the node 8443 GUI not loading.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

The VMware Identity Manager (vIDM) Load Balancer dashboard fails to reflect a specific vIDM node as active. Furthermore, direct access to the affected node's port 8443 GUI is unavailable, and the OpenSearch service fails to initialize.

Environment

VMware Identity Manager 3.3.x

Cause

This may occur when the idm-cacerts is corrupted on the affected VMware Identity Manager node.

Resolution

Workaround:

1. SSH to VMware Identity Manager Appliance(s) using root credentials. Navigate to the directory /usr/local/horizon/conf and verify whether the idm-cacerts file is blank or not.

2. On the non-working vIDM node, check if the idm-cacerts file is blank or corrupted.

3. If the file is blank or corrupted, take a backup of the current file by using the following command:

   mv idm-cacerts idm-cacerts.backup

4.  Copy the idm-cacerts file from a working node to the non-working node using the command below:

   scp idm-cacerts <root@non-working-vidm-node>:/usr/local/horizon/conf/

5.  Verify on non-working vIDM node if idm-cacerts is copied correctly.

6. Update the ownership and permissions of the file by running the following commands:

   chown horizon:www idm-cacerts  
   chmod 777 idm-cacerts
   

7. Start the workspace service using the command:

   service horizon-workspace start

8. Start the OpenSearch service using the command:

   /etc/init.d/opensearch start