Fleet management Locker Components are missing in VCF Operations

Products

• VCF Operations

Issue/Introduction

Product components for the connected Fleet Management 9.0.1 instance are visible within VCF Operations 9.0.1 under Fleet Management -> Lifecycle -> Product Components.

Certificates and passwords associated with these Fleet Management - VCF Instance section are displayed in the VCF Operations 9.0.1 interface.

Certificates and passwords associated with these Fleet Management - VCF Management section are not displayed.

In the /storage/vcops/log/vcops-bridge.log file on the Operations node we see entry like:

SSLPeerUnVerifiedException: Host name 'fleetmanager_fqdn' does not match the certificate subject provided by the peer (CN=fleetmanager_hostname, OU=VCF, O=Broadcom, C=US)

 

Environment

VCF Operations 9.0.x

Cause

SSL certificate issue between Fleet manager and VCF operations. it was observed that the Fleet manager certificate’s CN is set to a short hostname instead of a FQDN.

Resolution

SSH into the Fleet Manager appliance with the root account.

1. Temporarily enable the Fleet UI

   touch /var/lib/vrlcm/UI_ENABLED

2. Open the Fleet UI in a browser
3. Navigate to the Locker - Certificates
4. Generate a new certificate for Fleet Manager appliance making sure the certificate's CN has full FQDN of fleet manager appliance.
5. Follow the Replace a Certificate with an External CA-Signed Certificate document to replace the certificate.
6. To avoid having to wait for the six hour certificate and password collection cycle ssh to all the VCF Operations nodes and run the following as root.
   

   systemctl restart collector