VMware Aria Operations for Logs GUI Inaccessible - Received fatal alert: certificate_expired

Products

• VCF Operations

Issue/Introduction

Access to the VMware Aria Operations for Logs Web interface fails when the internal SSL certificate expires. This condition affects both browser connectivity and API-based integrations such as Aria Suite Lifecycle inventory sync and Aria Operations adapters.

• The browser displays "Connection Refused" or SSL certificate warnings.
• Aria Suite Lifecycle inventory sync fails with error: LCMVRLISYSTEM45050.
• Aria Operations adapter for Logs shows a "Certificate Expired" status.

/storage/core/loginsight/var/cassandra.log 

Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_expired
        at sun.security.ssl.Alert.createSSLException(Unknown Source) ~[?:?]
        at sun.security.ssl.Alert.createSSLException(Unknown Source) ~[?:?]
        at sun.security.ssl.TransportContext.fatal(Unknown Source) ~[?:?]
        at sun.security.ssl.Alert$AlertConsumer.consume(Unknown Source) ~[?:?]
        at sun.security.ssl.TransportContext.dispatch(Unknown Source) ~[?:?]
        at sun.security.ssl.SSLTransport.decode(Unknown Source) ~[?:?]

Environment

VCF Operations for Logs 8.x 

Cause

The internal SSL certificate used for secure communication (HTTPS) has expired. This prevents the Log Insight service from establishing secure handshakes.

Resolution

Replace the SSL certificate on VCF Operations for Logs:

1. Log in to the Primary Node via SSH as root.
2. Execute the recovery script to restore a valid self-signed certificate:
         /opt/vmware/bin/li-ssl-cert.sh --replace --force
3. Restart the service:
         systemctl restart loginsight

 

Additional Information

Install a self-signed certificate in VMware Aria Operations for Logs 8.12 and Later