TLS Connections Fail When VMware Data Services Manager (DSM) Contains 350+ User-Uploaded Trusted Root Certificates

Products

• VMware Data Services Manager

Issue/Introduction

TLS-dependent functionalities, including LDAP authentication and email notifications, fail in VMware Data Services Manager when the number of trusted root certificates surpasses approximately 350+ entries.

Environment

VMware Data Services Manager versions up to 9.0.0.0

Cause

Exceeding the truststore capacity of ~500 certificates leads to file corruption, reducing the truststore (/opt/vmware/tdm-provider/cert/truststore.p12) to 0 bytes. This set includes 350+ user-uploaded certificates along with ~150 OS-trusted certificates. This results in the complete loss of all stored certificates and disrupts TLS connections.

Resolution

Please contact VMware DSM support to work through this situation.