VCF Operations for Logs experience recurring truststore corruption

Products

• VCF Operations

Issue/Introduction

• Truststore file /usr/java/jre-vmware/lib/security/cacerts returns to 0 bytes after applying KB Replace a corrupted truststore in VCF/Aria Operations for Logs 
• "Failed to establish a connection with VCF SSO server" error appears in UI when trying to sign in with SSO user.
• "Failed to download fields. The list of fields is incomplete" error visible in the UI when navigating dashboards
• /storage/core/loginsight/var/runtime.log on the VCF Operations for Logs appliance shows the error: java.io.EOFException: no data in keystore stream and "Failed to load default trust store"
• Listing the certificates in the trust store returns the error : 

  keytool-no-provider -list -keystore /usr/java/jre-vmware/lib/security/cacerts -storepass changeit
  Warning: use -cacerts option to access cacerts keystore
  keytool error: java.lang.Exception: Keystore file exists, but is empty: /usr/java/jre-vmware/lib/security/cacerts

Environment

VCF Operations 9.0.x

Resolution

Open a support ticket with Broadcom referencing this KB article 444530 in the description. Refer to Creating and managing Broadcom cases