Updating the self-signed certificate fails in VMware Aria Operations for Logs 8.18.5 and later.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

In VMware Aria Operations 8.18.5 and later, when updating a self-signed certificate, the process appears to complete successfully, with the exception of seeing the sed error "unable to read custom.pem" when running the custom-ssl-cerf command. 

However the following issues remain:

• Unable to unlock or reset the admin password.
• Unable to log into the product UI with known good usernames/passwords.
• Unable to log into the Cassandra database using cqlsh-no-pass. 
• The UI is unavailable even though the nodetool-no-pass shows all nodes as Up/Normal.
• When replacing the self-signed certificate and running the /usr/lib/loginsight/application/sbin/custom-ssl-cerf command,  you get the error "unable to read custom.pem".

Environment

• VMware Aria Operations for Logs 8.18.5
• VMware Aria Operations for Logs 8.18.6
• VMware Aria Operations for Logs 8.18.7

Cause

Error in the /usr/lib/loginsight/application/sbin/custom-ssl-cerf script where the certificate is not copied properly to the Cassandra database.

Resolution

When following the KB to Install a sef-signed certificate in VMware Aria Operations for Logs, under the section "Install Certifcate," add the following step after running the /usr/lib/loginsight/application/sbin/custom-ssl-cerf command:

cp /usr/lib/loginsight/application/etc/certs/cluster.pem /storage/core/loginsight/cidata/cassandra/config/cacert.pem

Additional Information

Please see KB 315949 for the full process to replace a certificate or create a self-signed certificate.