Error: "Verify account has proper administrative privileges. 5" when running dir-cli command

Products

• VMware vCenter Server

Issue/Introduction

• When executing the following dir-cli command twice, the error "Verify account has proper administrative privileges. 5" occurs.

/usr/lib/vmware-vmafd/bin/dir-cli trustedcert get --id [id] --login administrator@[domain name] --password <PASSWORD> --outcert /tmp/oldcert.cer

• The same error also occurs when running the script from the following KB twice:
  Removing CA Certificates from the TRUSTED_ROOTS store in the VMware Endpoint Certificate Store(VECS) in vCSA using script

Environment

vCenter Server 8.x

Cause

Internally, both the command and the script mentioned above output certificate information to a temporary file at /tmp/oldcert.cer. If the operation is re-executed while this file already exists, the process fails and results in the "Verify account has proper administrative privileges. 5" error.

Resolution

Before re-executing the script, delete the temporary output file /tmp/oldcert.cer by running the "rm /tmp/oldcert.cer" command.

Additional Information

dir-cli コマンド実行時に 「Verify account has proper administrative privileges. 5」 のエラーが発生する