UI inaccessible due to expired intermediate SSL certificate - Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Alert 'Adapter certificate has expired or will expire shortly' is triggering for VMware Aria Operations for Logs adapter instance in VMware Aria Operations 
• VMware Aria Operations for Logs Adapter instance connection is successful when signing into VMware Aria Operations product UI → Navigate to Administration → Integrations → Expand VMware Aria Operations for Logs Adapter → Select  VMware Aria Operations for Logs Adapter instance →  Click on Edit →  Click Validate Connection →  Test connection successful 
• /storage/core/loginsight/var/runtime.log in the VMware Aria Operations for Logs node(s) shows error similar to

  [2025-10-30 08:04:44.624+0000] ["########"/###.###.###.### WARN] [com.datastax.oss.driver.internal.core.control.ControlConnection] [[###] Error connecting to Node(endPoint=###.###.###.###:9042, hostId=null, hashCode=#######), trying next node (ConnectionInitException: [###|control|id: #####, L:/###.###.###.###:57290 - R:/###.###.###.###:9042] Protocol initialization request, step 1 (OPTIONS): failed to send request (javax.net.ssl.SSLHandshakeException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed))]
  [2025-10-30 08:04:45.011+0000] ["DaemonCommands-thread-1"/###.###.###.### WARN] [org.apache.thrift.server.TThreadPoolServer] [SocketException occurred during processing of message.] java.net.SocketException: Broken pipe (Write failed)

• Inspecting the SSL certificate in the browser shows the expiry date in the future
• Decoding all of the certificates in the certificate chain using a certificate decoder showed that the intermediate certificate had expired but the primary and root certificate had a valid expiry date. 
• Resetting Admin password fails with error "Possible Cassandra is down" when attempting to reset the admin password as per KB Reset and unlock the local admin account in VCF Operations for Logs 
• Running df -h on the Aria Operations for Logs node shows that the root partition is full this is due to repeated connection failure retries being logged when the certificate is expired
• Running the following command on each node shows that the certificate has expired:

  echo "" | keytool -list -keystore /usr/lib/loginsight/application/etc/3rd_config/keystore -rfc 2> /dev/null | openssl x509 -noout -enddate

Environment

• VMware Aria Operations for Logs 8.18.
• VMware Aria Operations 8.18.x

Cause

The trust relationship is broken because an intermediate certificate within the SSL chain has reached its expiration date, even if the root and end-entity (primary) certificates remain valid

Resolution

1. Take a snapshot of all Aria Operations for Logs nodes as per KB How to take a Snapshot of Operations for Logs 
2. Apply KB SSL certificates are expired for Aria Operations for Logs (Formerly Log Insight) to reload default certificates
3. Renew the intermediate certificate and add it to the certificate chain .  You can use the following Install a Custom SSL Certificate as a guide 
4. Apply the steps under the heading 'Install Certificate' in the KB Install a custom certificate in VMware Aria Operations for Logs 8.12 and Later to install the certificate