Error: Certificate of Airgap associated with VIM has been changed.

Products

• VMware Telco Cloud Automation

Issue/Introduction

• On the Connected Endpoints page, you see the Airgap server as 'Not Trusted'
• Hovering over the error shows the following:
  
  Certificate of Airgap associated with VIM <VIM_NAME> has been changed. Please refer the Telco Cloud Automation Documentation to update the Airgap certificate in TCA.
 
• Airgap was recently deployed using the 'auto-generate' setting in the user-inputs.yml set to 'True'

Environment

3.1

Cause

When 'auto-generate' is set to true, a private root CA and server certificate will be created and configured for use by the Airgap server. This CA certificate will need to be added to the TCA Trusted Root Certificates store manually.

Resolution

1. Acquire the generated CA file from the Airgap server at /root/certs/ca.crt
2. In the TCA-CP appliance management page (https://FQDN:9443) of the respective VIM, navigate to the 'Administration' > 'Certificate' > 'Trusted CA Certificate'
3. Import the CA file you copied from the Airgap Server
4. Navigate to the 'Appliance Summary' page
5. Restart the 'Certificate Observability Service'