VCF Operations UI does not show Password or Certificate information for VCF Management

Products

• VCF Operations

Issue/Introduction

Applied a CA signed cert to Fleet Manager VM after which the VCF Operation GUI is not showing Certificate and Passwords under "VCF Management" section.

Errors in the /storage/vcops/log/vcops-bridge.log

... Host name '<fleet-fqdn>' does not match the certificate subject provided by the peer (CN=<fleet-fqdn> ...

Environment

VCF Operations 9.0.x

Cause

The SAN field in the new Fleet Manager certificate does not contain an entry that exactly matches the Fleet Manager FQDN.

Resolution

Restore the previous certificate on the Fleet Manager

1. Create a snapshot of the Fleet Manager appliance ( How to create a snapshot for VCF Operations Fleet Manager appliance )

2. Log in to the Fleet Manager as root via SSH

3. Revert the server.crt and server.key to the most recent backup copies.

   find /opt/vmware/vlcm/cert -type f -regextype posix-egrep -regex '/opt/vmware/vlcm/cert/server.crt_[0-9]{13}' | sort | tail -n 1 | xargs -I {} cp --backup=numbered {} /opt/vmware/vlcm/cert/server.crt
   
   find /opt/vmware/vlcm/cert -type f -regextype posix-egrep -regex '/opt/vmware/vlcm/cert/server.key_[0-9]{13}' | sort | tail -n 1 | xargs -I {} cp --backup=numbered {} /opt/vmware/vlcm/cert/server.key

4. Reboot the Fleet Manager

   Note: The Fleet Management > Lifecycle page in VCF Operations will change to "VCF Operations Fleet Management is Not Ready"

5. Contact Broadcom support to apply internal steps from "Error connecting Fleet management node, try again" when connecting Fleet Management to VCF Operations to reconnect the Fleet Manager to VCF Operations

   Note: Once the connection is restored, it can take up to 24 hours to see the Certificates or Passwords in VCF Operations

Additional Information

VCF Operations UI does not show Password or Certificate information for the VCF Instance

Fleet management Locker Components are missing in VCF Operations