How to re-create corrupt keystore in Usage Meter

Products

• VMware Usage Meter

Issue/Introduction

Running below command while trying to renew certificate fails with following errors:

keytool -changealias -alias "usage-meter-platform" -destalias "usage-meter-platform-backup" -keystore /opt/vmware/cloudusagemetering/platform/security/cacerts -storetype BCFKS -providerclass org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider -providerpath /opt/vmware/cloudusagemetering/platform/lib/bc-fips-*.jar -storepass "${TRUST_STORE_PASSWORD}

• keytool error: java.lang.Exception: Alias <usage-meter-platform> does not exist
  
  OR
  
  
• keytool error: java. io. IOException: BCFKS KeyStore corrupted: MAC calculation failed.
  
  
  

Environment

Usage Meter 4.8

Resolution

Following are the steps to re-create keystore in Usage Meter:

Note: Make sure to take snapshot of the appliance without memory and have full backup.

1) Log in to the vCloud Usage Meter console as usagemeter and stop all appliance services.

cd /opt/vmware/cloudusagemetering
./scripts/stop.sh All
sudo systemctl stop vmware-um-journal.service
sudo systemctl stop vmware-um-login.service
sudo systemctl stop vmware-um-schedule.service

2) Export the environment variables.

export $(grep -v '^#' "/opt/vmware/cloudusagemetering/platform/conf/env.properties" | xargs)

3) Create a new keystore for the CA-signed certificate.

/opt/vmware/cloudusagemetering/platform/bin/create-keystore.sh

Make sure to follow the respective section of the vCloud Usage Meter Certificate Management to renew certificates.