vCenter shows alarm "Solution user certificate(s) in VECS is about to expire"

Products

• VMware vCenter Server 8.0

Issue/Introduction

The alarm "Solution user certificate(s) in VECS is about to expire" is displayed in the vSphere Client.

Environment

VMware vCenter Server 8.x

Cause

• This occurs because the solution user certificates for the vCenter Server are nearing their expiration date.
  
  
• To confirm the certificate expiration dates, connect to the vCenter Server via SSH as root and execute the following command:
  for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i; sudo /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --text | egrep "Alias|Not After"; done

Resolution

1. Replace the solution user certificates using the following KB article: How to replace the vCenter Server Solution User certificates with VMCA issued certificates.
2. After successfully replacing the solution user certificates, reset the alarm to green. To do this in the vSphere Client, select the vCenter Server, navigate to Monitor > Triggered Alarms, select the alarm, and click RESET TO GREEN.