IOFilters are going offline after replacing SMS Certificate

Products

• VMware vCenter Server
• VMware vSphere ESXi 8.0

Issue/Introduction

• Replace SMS Certificate by deleting sms certificate from VECS Store and restarting sps service, due to expired or expiring certificate.
• IOFilters are showing offline in the GUI.
• In the vCenter log: /var/log/vmware/vmware-sps/sps.log you will see entries similar to the below:
  
  [YYYY-MM-DDTHH:MM:SS]  [pool-10-thread-5] ERROR opId=sps-Main-101761-246 com.vmware.vim.sms.provider.vasa.alarm.AlarmDispatcher -
  [YYYY-MM-DDTHH:MM:SS] [pool-10-thread-1] ERROR opId=sps-Main-101761-246 com.vmware.vim.sms.provider.vasa. alarm. AlarmDispatcher - Error: org.apache.axis2.AxisFault: self signed certificate occured as provider: https://<ESXi-A FQDN>:9080/version.xml:9080/version.xml is offline
  [YYYY-MM-DDTHH:MM:SS]  [pool-10-thread-4] ERROR opId=sps-Main-101761-246 com.vmware.vim.sms.provider.vasa.alarm.AlarmDispatcher - Error: org.apache.axis2.AxisFault: self signed certificate occured as provider: https://<ESXi-C FQDN>:9080/version.xml:9080/version.xml is offline

Cause

SMS Self-Signed Certificate is used during communication with IOFilter VP and SMS Self-Signed and vp certificate. Deleting sms_self_signed will make all Vasa Provider offline on restart of SPS service and customer needs to unregister and re-register them again.

Resolution

Unregister and re-register IOFilters by using the script available in this KB Article - Resolving IOFilter disconnected/offline post upgrade to 7.0u2

 

Additional Information

How to renew an IOFilter Certificate

Certain IOFIlter Providers are showing as offline