How to renew an adapter certificate or clear the Expired Certificates banner in Aria Operations

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• Upon logging into the Product UI of Aria Operations, you see a banner across the top stating that there are expired certificates, with a link directing you to the Administration > Control Panel > Trusted Certificates section of the UI with the following possible text (Administration > Certificates in versions below 8.18.x):
  

  "Your certificate is expired. Please check the expiry date to take an action"

• You may notice metric collection from a management pack has stopped and an adapter instance in Administration > Integrations may be in a Warning Status.
  • Hovering mouse pointer over the Warning Status shows a message similar to:
    

    Certificate validation has failed

Environment

Aria Operations 8.x
vRealize Operations 8.x

Cause

The presence of this banner indicates that you have previously trusted certificates within Aria Operations that have expired.

Resolution

Review article Certificate overview for VMware Aria Operations section 'Adapter and authentication sources' for more information on endpoint certificates and potential caveats.

To resolve this issue:

1. Ensure you are logged in with an admin-level account.
2. Click the link in the banner, or navigate to Administration > Control Panel > Trusted Certificates (For Aria Operations versions below 8.18 navigate to Administration > Certificates)
3. Sort by the Expires column, and note which certificates are expired, as well as what endpoint they were issued to.
4. Make note of the Certificate you are deleting. Is the certificate from a Management Pack or an Authentication Source?
5. Delete the expired certificate(s).
6. Note: If the following pop-up "Confirmation" window shows up when trying to delete the certificate, click "NO". Then proceed with the steps below. 
    
   

If the certificate is from a Management Pack (Adapter instance):

1. Navigate to Administration > Integrations (Data Sources > Integrations in older versions). 
2. Expand the Account instances until you find those correlated to the expired certificates identified in Step 3 above.
3. Click the ellipsis, then Edit, followed by Validate Connection.
4. Accept the new certificate if it is presented, and then click OK then Save.
5. Delete the expired certificate.
6. Note: If the above steps still do not delete the expired certificate, the workaround is to make note of the configurations of the accounts under the Management Pack(s). Then delete the accounts without deleting related objects. Then delete the expired certificate. Then add the accounts back to the Management Pack. 

If the certificate is from an Authentication Source:

1. Navigate to Administration > Control Panel > Authentication Sources (Administration > Authentication Sources in older versions)
2. Click the ellipsis then Edit
3. Click on Test.
4. Accept the new certificate if it is presented, and then click OK.

Additional Information

If you see message 'Cannot connect with the credentials due to an incorrect username or password' , follow KB article vCenter adapter integration failure in Aria Operations.