Error: “‘Private key is encrypted and has not been unlocked" encountered while replacing a custom certificate in Aria Operations for Logs

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

While trying to replace custom certificate in Aria Operations for logs, the operation fails with the following error: “Failed to update certificate: [‘Private key is encrypted and has not been unlocked (use --password).’] Unable to use the private key with certificate.”

Environment

Aria Operations for Logs 8.x

Cause

The private key provided with the certificate is encrypted and is not decrypted prior to performing the certificate replacement.

Resolution

• Engage the internal certificate team to provide a decrypted version of the private key.
• Create a new .pem file using the decrypted private key.
• Perform the certificate replacement by following the procedure documented in the KB:  Install a custom certificate in VMware Aria Operations for Logs 8.12 and Later