Cannot generate private keys for new VMware Identity Manager and Load Balancer certificates using VMware Aria Suite Lifecycle

Products

• VCF Operations

Issue/Introduction

Unable to locate or generate private keys for new certificates for VMware Identity Manager and the Load Balancer using VMware Aria Suite Lifecycle(LCM)

When creating a new certificate or importing a CA signed from LCM to replace expiring certificates, users are unable to import it into NSX Manager because the LCM locker only displays the SHA-1 fingerprint and does not show the private keys in the interface.

Environment

• VMware Identity Manager
• VMware Aria Suite Lifecycle

Cause

This is a known user experience limitation where the private key is not displayed directly in the LCM locker UI, but is instead embedded within the generated certificate file.

Resolution

To locate the private key and resolve the issue, follow these steps:

1. Download the newly generated certificate PEM file from LCM.

2. Open the downloaded PEM file; the private key is located at the bottom of the file.

3. Verify that all VMware Identity Manager nodes and the Load Balancer FQDN are present in the certificate.

4. Follow the steps outlined in Adding or Replacing Certificates for VMware Identity Manager in Aria Suite Lifecycle to replace the certificate.