PowerStore: How to Renew the PowerStore VASA Storage Provider Certificate After Expiration

Renew the VMware vSphere APIs for Storage Awareness (VASA) storage provider certificate in vCenter using the Refreshed certificate feature before the certificate expires.

If the certificate has expired, follow the steps below to renew the certificate on the PowerStore cluster and update the certificate in vCenter:

1. Renew the certificate using PowerStore CLI or RestAPI:

   PowerStore CLI (PSTCLI)

   pstcli -ssl accept -u admin -p <adminPassword> -d <PowerStore-Cluster-IP> x509_certificate reset_certificates -service VASA_HTTP
   

   RestAPI/curl
   Run curl commands from any Linux or recent Windows clients that have the curl utility.

   1. To check run

      C:\>curl -V

2. curl -X POST "https://<PowerStore-Cluster-IP>/api/rest/x509_certificate/reset_certificates" -H "accept: application/json" -H "Content-Type: application/json" -d "{ \"service\": \"VASA_HTTP\"}" -u admin -k

   NOTE: Keep in mind that the curl command does not display any error message if the wrong account password is submitted.

3. Verify the certificate expiration date.

   1. Open the PowerStore Manager user interface (UI).
   2. Click Settings > Security > Certificates.
   3. Locate the certificate with the following attributes:
      • Service: VASA HTTP
      • Type: Server
      • Scope: VASA
        

4. In vSphere, manually remove and add the VASA storage provider.

   1. Open the vSphere web UI.
   2. Under the Hosts and Clusters view, in the left pane click the top vCenter.
   3. Click the Configure tab, and click Storage Providers.
   4. Click the PowerStore VASA provider that is in the offline state, and click Remove.
      
   5. Click Add, and enter the following in the (Add dialog) screen:
      NOTE: Use any user account that has the Administrator or VM Administrator role.

      URL: https://<PowerStore-Cluster-IP>:8443/version.xml
      User name: admin
      Password: <admin user password>
      Clear the Use storage provider certificate option.

5. After adding the PowerStore VASA provider, check the datastore status.