VPLEX：security configure-certificate 命令执行失败，并显示“Is a directory”错误

而 security configure-certificate 命令执行失败，并显示以下错误：

VPlexcli:/> security configure-certificates
 security configure-certificates:  Evaluation of <<security configure-certificates>> failed.
 cause:                            Command execution failed.
 cause:                            21
 cause:                            Is a directory

客户端日志中显示的错误：

2018-08-08 19:37:37,770 INFO  [Thread-57] service_localhost_T20810: security configure-certificates
2018-08-08 19:37:37,771 INFO  [Thread-57] audit: security configure-certificates
2018-08-08 19:37:37,892 ERROR [DefaultCommandHandler-Thread-3] security configure-certificates: Failed to configure certificates: Validation error: Certificates already present in the system.                    Delete old certificates before configuring the system with                    new certificates.
2018-08-08 19:37:37,967 ERROR [DefaultCommandHandler-Thread-3] ConfigureCertificatesCmd: 21
Traceback (most recent call last):
  File "/opt/emc/VPlex/jython2.7b4/LibExt/yyapi.py", line 322, in _execute
    result = self._execute_(shell,context,args)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 148, in _execute_
    cfgCert.restore()
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 241, in restore
    self.cleanup()
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 656, in cleanup
    self._deleteFilesInDir(GlobalVals.DEFAULT_CACERT_LOCATION)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 675, in _deleteFilesInDir
    self._removeFile(filePath)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 652, in _removeFile
    os.remove(file)
OSError: [Errno 21] Is a directory: '/etc/ipsec.d/cacerts/save'

手动创建名为 save 创建于 /etc/ipsec.d/cacerts/ 干扰了安全证书续订所需的检查。

解决办法：

1. 使用 登录到 VPLEX 管理服务器 service 帐户凭据：

login as: service
Using keyboard-interactive authentication.
Password:
service@vplex01:~>

2. 转至 /etc/ipsec.d/cacerts/ 路径，然后检查名为 save：

service@vplex01:~> cd /etc/ipsec.d/cacerts/
service@vplex01:/etc/ipsec.d/cacerts> ll save

3. 删除具有以下名称的文件： save：

service@vplex01:/etc/ipsec.d/cacerts> rm -rf save

4. 先删除旧证书，然后 再运行 security configure-certificate 命令如下：

service@vplex01:~> rm /etc/ipsec.d/*/*pem* 

5. 转至 VPLEXCLI 并运行 security configure-certificates 命令并检查它是否成功运行：

VPlexcli:/> security configure-certificates

6. 如果命令仍然失败，请联系戴尔客户支持并参阅本文。