Certificate update fails with password error LCMVIDM74071 in Aria Lifecycle Manager

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

The following error occurs when attempting to update the VMware Identity Manager (vIDM) certificate within Aria Suite Lifecycle: LCMVIDM74071.

Environment

VMware Aria Suite Lifecyle 8.18.x

VMware Identify Manager 3.3.7

Resolution

There is a credential mismatch between the vIDM node passwords (root/sshuser)  and the passwords in Aria Suite Lifecycle Locker. Consequently, OpenSearch services have stopped on vIDM nodes. 

• Remediate Credentials for VIDM in VMware Aria Lifecycle Manager
  
  If the passwords on the appliances do not match what is stored in Aria Suite Lifecycle (LCM), replace the VIDM certificates can fail. 

1. 1. Log in to Aria Suite Lifecycle.

   2. Navigate to Locker > Passwords.

   3. Locate the entries for the root and sshuser accounts. If they are incorrect, click Edit and update them with the current passwords.
      
      

• Restart OpenSearch Services
  
  

1. 1. Take snapshots without memory on each VIDM node. How to take a Snapshot of VMware Identity Manager
      
      
   2. Try steps from KB: VMware Identity Manager (vIDM / WSA) opensearch service will not start.
      
      

• Take new snapshots in VIDM and re-try applying the custom certificates in VIDM using VMware Aria Lifecycle Manager.

Additional Information

Note: If the VIDM certificates are already expired don't use VMware Aria Lifecyle manager.

Expired certificate on VMware Aria Suite products can't be replaced using VMware Aria Suite Lifecycle.