Aria Operations for Logs UI is unreachable after certificate renewal

Products

• VCF Operations

Issue/Introduction

• Aria Operations for Logs UI is inaccessible ("Site not reachable").
• nodetool-no-pass status shows all nodes are UP.
• Loginsight service is active and running.
• /storage/core/loginsight/var/runtime.log contains below error message:

  io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown.

• Certificate has been renewed following KB 315949.

Environment

Aria Operations 8.18.x

Cause

This issue occurs when network traffic on port 443 is blocked between the client (e.g., jumpbox) and the master node, or when an external load balancer is not correctly passing the SSL traffic after a certificate change.

Resolution

1. Verify if the UI is accessible directly from the master node console or a local network segment.
2. Test connectivity to port 443 from the affected client using telnet or Test-NetConnection: Test-NetConnection -Port 443
3. If port 443 is failing while port 22 (SSH) is reachable, contact your network team to unblock port 443.
4. If using an external load balancer, ensure the new certificate is updated on the load balancer side.

Additional Information

You can follow below KB article to re-new expired certificate:

https://knowledge.broadcom.com/external/article/315949/install-a-custom-certificate-in-vmware-a.html