Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell VxRail：无法登录到 VCSA，出现错误 500。 PSC&VC 证书已过期且无法续订。

Summary: 无法登录 vCenter，错误为 500。PSC 和 vCenter 证书已过期且无法续订。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

无法登录 vCenter，并显示错误 500 SSO。PSC 和 VC 证书已过期，无法续订。
  • 使用以下命令列出 PSC 和 VCSA 的 CLI 中的证书： 
for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --text | egrep "Alias|Not After"; done

在这种情况下，STS 和 PSC 证书已续订，并且 PSC 服务已成功启动，但 VCSA 证书无法续订。

Status : 85% Completed [starting services...]
Error while starting services, please see log for more details
Status : 0% Completed [Operation failed, performing automatic rollback]
Rollback Status : 85% Completed [starting services...]
Error while starting services, please see log for more details
Rollback Status : 0% Completed [Rollback operation failed]
Found error in certificate-manager.log
2020-07-07T05:35:07.885Z INFO certificate-manager MACHINE_SSL_CERT certificate replaced successfully. SerialNumber and Thumbprint changed.
2020-07-07T05:35:30.982Z ERROR certificate-manager 'lstool get' failed: 1
2020-07-07T05:35:30.983Z ERROR certificate-manager please see /var/log/vmware/certificate-manager.log for more information.
  • 使用以下命令在 VCSA 的 CLI 中列出证书：
root@vcserver [ ~ ]# for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --tex t | egrep "Alias|Not After"; done
STORE MACHINE_SSL_CERT
Alias : __MACHINE_CERT
Not After : Jul 7 06:08:54 2022 GMT
STORE TRUSTED_ROOTS
Alias : e0aa985977e68d108d4dd31405fd420f4201380f
Not After : Jun 28 03:40:14 2028 GMT
Alias : 5d349a64d4fe81701f6b821e7518dd116d3dbd2c
Not After : Jul 2 04:50:39 2030 GMT
STORE TRUSTED_ROOT_CRLS
Alias : cc8d6a249fc496029ffff4f6f87219d30bb4ffcc
Alias : 927ba815ca062a8de35ff58667e837bf46b548cc
STORE machine
Alias : machine
Not After : Jul 3 03:44:26 2020 GMT------------- internal solution user certificates not renew
STORE vsphere-webclient
Alias : vsphere-webclient
Not After : Jul 3 03:44:27 2020 GMT-------------internal solution user certificates not renew
STORE vpxd
Alias : vpxd
Not After : Jul 3 03:44:27 2020 GMT--------------internal solution user certificates not renew
STORE vpxd-extension
Alias : vpxd-extension
Not After : Jul 3 03:44:28 2020 GMT------------internal solution user certificates not renew
STORE SMS
Alias : sms_self_signed
Not After : Jul 4 03:59:04 2028 GMT
STORE BACKUP_STORE
Alias : bkp___MACHINE_CERT
Not After : Jul 7 05:48:50 2022 GMT
Alias : bkp_machine
Not After : Jul 3 03:44:26 2020 GMT
Alias : bkp_vsphere-webclient
Not After : Jul 3 03:44:27 2020 GMT
Alias : bkp_vpxd
Not After : Jul 3 03:44:27 2020 GMT
Alias : bkp_vpxd-extension
Not After : Jul 3 03:44:28 2020 GMT

Cause

当存在第三方扩展（如 nimble storage、veeambackupUI 等）且没有向 vCenter Server 注册有效证书时，会出现此问题。请参阅 VMware 文章 2150057 此超链接会将您带往 Dell Technologies 之外的网站。。

Resolution

请参阅 VMware 文章 215007 此超链接会将您带往 Dell Technologies 之外的网站。。尝试注销第三方扩展程序。如果用户由于证书已过期而无法访问 MOB，请按照 VMware 文章 1025360 此超链接会将您带往 Dell Technologies 之外的网站。进行操作。

要解决 MOB 过期的问题，请执行以下操作： 
  • 将 PSC 和 VCSA 快照恢复到备份。
  • 为 PSC 和 VCSA 拍摄新快照。
  • 将 PSC 和 VCSA 时间从 NTP 设置为手动。
  • 设置证书到期前 24 小时的 PSC 和 VCSA 时间。（高级设置“vpxd.certmgmt.certs.minutesBefore”默认为 24 小时）
  • 重新启动 PSC 和 VCSA 服务，您现在可以访问 VC MOB。
  • 按照 VMware 文章1025360此超链接会将您带往 Dell Technologies 之外的网站。并取消注册非默认第三方扩展。
  • 使用证书管理器选项 8 续订 PSC 证书。如果 vmware-cm 服务 无法启动，请按照 VMware 文章 76719此超链接会将您带往 Dell Technologies 之外的网站。 修复 STS 证书，然后重新启动 vmware-cm 服务。
  • 使用选项 8 续订 VC 证书。
  • 将时间设置为正确的时间，然后重新启动 PSC 和 VCSA 服务。

Additional Information

请记住在 VXM 上重新导入证书。遵循文章 VxRail：如何在 VxRail Manager 上手动导入 vCenter SSL 证书。

Affected Products

VxRail Appliance Series

Products

VxRail Appliance Series
Article Properties
Article Number: 000070683
Article Type: Solution
Last Modified: 24 May 2024
Version:  7
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.