Disabling checkbox "Clear the Default Trusted Certificates Store" does not remove runtime file

Products

• VMware Tanzu Kubernetes Grid Integrated Edition

Issue/Introduction

In Bosh Director tile --> Security --> checkbox "Clear the Default Trusted Certificates Store" is available. Enabling this checkbox deletes all the certificates in the system certificate trust store every time BOSH deploys a VM. Certificates added in the 'Trusted Certificates' field will still be trusted and you should add the certificates required to access your IAAS Provider services.

 

 

Environment

OpsMan/Bosh Director affected versions v3.3.x and below

Cause

When the operator enables the checkbox it creates a runtime config file called "clear_default_trusted_certificates_store_runtime_config". Once the checkbox is disabled this file is not removed, which means the setting stays turned on. This bug is being reviewed by R&D to be fixed. 

Resolution

To workaround this problem is to run the following steps:

1. Make sure the checkbox "Clear the Default Trusted Certificates Store" is disabled.

2. Run bosh configs command, find the config "clear_default_trusted_certificates_store_runtime_config" and check its number.

3. Then run bosh delete-config "runtime-config-number"

4. Run Apply Changes.

This removes this setting completely.