Unable to Delete Expired Certificate from locker, It's Failing with Error " Still in use "

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

This article provides step-by-step guidance on permanently removing certificates from the locker that have expired and are no longer in use.

Environment

Aria Suite Lifecycle Manager 8.x

Resolution

Prerequisites

• You have backups / Snapshots of the Aria Suite Lifecycle Manager 8.x appliance(s).
• Kindly confirm that the Certificate intended for deletion is not in active use by any running environment. Please ensure this validation extends to the environment side as well

Procedure

1. SSH into the Aria Suite Lifecycle Manager appliance node.

2. Run the following commands to connect to the Postgres database of Aria Suite Lifecycle Manager

su - postgres
cd /opt/vmware/vpostgres/11/bin
./psql -d vrlcm

3. Run the below command to list all the database tables.

\dt

4. Locate the "vm_locker_certificate" from the list of database tables.

5. Run the below command to retrieve the data from the "vm_locker_certificate" table and locate the "Targeted certificate"  Alias from the list. in Example we are doing it for certificate Name with "test"

select * from vm_locker_certificate;

6. Run the below command to confirm the correct certificate gets displayed.

select * from vm_locker_certificate where alias='test';

7. Run the below command to delete the "MyVMware" credential from the database.

delete from vm_locker_certficate where alias='test';

8. Run the below command to disconnect from postgres.

\q

9. Login to the Aria Suite Lifecycle Manager user interface and reload the Locker >> Certificate  page and validate if the "test" certificate  got deleted.