UNSOLVED

daphnis

updated

6 years ago

D

daphnis

1 Rookie

6 Posts

0

3746

November 9th, 2017 05:00

Unity VSA - VASA certificate renewal

I recently had an issue where a Unity VSA (4.0) was registered to a vCenter and, as part of that, the VASA provider was registered. When that occurred, a certificate is signed by the VMCA with the duration of one year. More than a year went by and the certificate expired. I then removed the Unity VSA from this vCenter and attempted to add it to another vCenter. The VASA provider was still presenting the same expired certificate and so registration would always fail. I did a fair amount of searching online and could not find any procedure to remove or reset this certificate to an OOB state where it could be successfully registered again. Can anyone comment on a way to do this for future reference?

  • 2654

    0

    Posted November 19th, 2017 14:00

    Same issue here. I installed the VSA (new install), but am unable to register the VASA provider. The certificate provided to vSphere has expired (expiration date of 2015).

    Unable to verify the authenticity of the specified host.

    The SHA1 thumbprint of the certificate is:

    29:32:28:83:8F:F6:EF:83:F7:F3:BF:D7:67:E8:5C:C4:E9:72:E7:5F

    Issuer:CN=www.emc.com,OU=CMG,O=EMC,L=Hopkinton,ST=MA,C=US

    Subject:CN=www.emc.com,OU=CMG,O=EMC,L=Hopkinton,ST=MA,C=US

    Valid from: Tuesday may 1st 2012 23:25:18

    Valid to: Friday may 1st, 2015 23:25:18

    Any idea how to renew this?

  • 2654

    0

    Posted November 26th, 2017 14:00

    anyone?

  • MdGanji

    1 Rookie

    46 Posts

    2654

    0

    Posted December 15th, 2018 09:00

    Me in the same boat ..

    Where are the EMC guys ?

  • MdGanji

    1 Rookie

    46 Posts

    2654

    0

    Posted December 16th, 2018 21:00

    I could solve the problem by using uemcli and deleteing the old X.509 VASA cetificate

  • domalab

    2 Posts

    1803

    0

    Posted April 29th, 2020 01:00

    Hi @MdGanji,

    Hope you could help me. I know it's an old thread but in 2020 it is still relevant!

    I'm experiencing the same issue with UnityVSA CE  4.5 and 5.0 and VMware 67u3.

    I can only log in as service with SSH and doesnt let me to delete the old certificate.

    Could you share tips on how you solved this?

    Thanks a lot for your assistance

  • Rainer_EMC

    6 Operator

    8645 Posts

    1774

    0

    Posted April 30th, 2020 06:00

    you may need to use the admin user with uemcli and not the service user

    see the uemcli reference guide or Unity security guide for details on what operation each Role is allowed to perform

  • MdGanji

    1 Rookie

    46 Posts

    1627

    0

    Posted June 2nd, 2020 02:00

    Hi,

    You should use EMC command line tool (uemcli)