Error while staging the upgrade PAK file of Aria Operations 8.17.1

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

After uploading the upgrade pak file in the Admin UI, Software Update section, the upgrade stops with the error:

Operations failed. If the error persists, contact VMware support.

Environment

Aria Operations 8.x

Cause

Expired web certificate as per upgrade logs below:

File:
deploy_new_upgrade_content_stderr.log

Located in directory:
/storage/log/vcops/log/pakManager/vRealizeOperationsManagerEnterprise-<BUILD_NUMBER>/

INFO - Identifying if the node is MASTER with security ping
WARNING:root:Open URL: 'https://localhost/casa/cluster/security/ping' failed with a URLERROR returned reason: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1076), exception: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:1076)>

 

 

Resolution

• Confirm that the certificate is expired with the following command (Replacing <PRIMARY_NODE_FQDN>):
  
  echo | openssl s_client -showcerts -connect <PRIMARY_NODE_FQDN>:443 2>/dev/null | openssl x509 -inform pem -noout -text | grep -A2 Validity
  
  
• If the certificate is expired please revert to default certificate using the following KB: Reload the default certificate in Aria Operations

Additional Information

If there is a requirement to use a CA signed certificate in the environment, the following KB can be used as a guide to replace the expired certificate:

Configure a Certificate For Use With VCF Operations