Recurring truststore corruption in VCF Operations for Logs

Products

• VCF Operations

Issue/Introduction

• Truststore file /usr/java/jre-vmware/lib/security/cacerts returns to 0 bytes after applying KB Replace a corrupted truststore in VCF/Aria Operations for Logs 

• "Failed to establish a connection with VCF SSO server" error appears in UI when trying to sign in with SSO user.

• "Failed to download fields. The list of fields is incomplete" error visible in the UI when navigating dashboards

• /storage/core/loginsight/var/runtime.log on the VCF Operations for Logs appliance shows the error: java.io.EOFException: no data in keystore stream and "Failed to load default trust store"

• A warning on the vCenter integration accompanied by a "vSphere event collection failed" error can be observed in the Integrations > vSphere view.

• Listing the certificates in the trust store returns the error : 

  keytool-no-provider -list -keystore /usr/java/jre-vmware/lib/security/cacerts -storepass changeit
  Warning: use -cacerts option to access cacerts keystore
  keytool error: java.lang.Exception: Keystore file exists, but is empty: /usr/java/jre-vmware/lib/security/cacerts

Environment

VCF Operations 9.0.x

Aria Operations for Logs 8.18.x

Cause

The trust store remains empty or repeatedly wipes the cacerts file due to a database exception caused by duplicate rows in a table.

Resolution

This issue will be resolved in the upcoming version of Aria Operations for Logs (8.18.8) and is not present in 9.1.x versions.

Open a support ticket with Broadcom referencing this KB article 444530 in the description. Refer to Creating and managing Broadcom cases

Subscribe to this article to receive latest updates : Subscribe to a Broadcom knowledge article by article or product