VPLEX: security configure-certificate command execution fails with "Is a directory" error

Summary: This article details "security configure-certificates" command execution which fails with an "Is a directory" error message.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

The security configure-certificate command execution fails with the following error:

VPlexcli:/> security configure-certificates
 security configure-certificates:  Evaluation of <<security configure-certificates>> failed.
 cause:                            Command execution failed.
 cause:                            21
 cause:                            Is a directory


Errors seen in the client log:

2018-08-08 19:37:37,770 INFO  [Thread-57] service_localhost_T20810: security configure-certificates
2018-08-08 19:37:37,771 INFO  [Thread-57] audit: security configure-certificates
2018-08-08 19:37:37,892 ERROR [DefaultCommandHandler-Thread-3] security configure-certificates: Failed to configure certificates: Validation error: Certificates already present in the system.                    Delete old certificates before configuring the system with                    new certificates.
2018-08-08 19:37:37,967 ERROR [DefaultCommandHandler-Thread-3] ConfigureCertificatesCmd: 21
Traceback (most recent call last):
  File "/opt/emc/VPlex/jython2.7b4/LibExt/yyapi.py", line 322, in _execute
    result = self._execute_(shell,context,args)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 148, in _execute_
    cfgCert.restore()
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 241, in restore
    self.cleanup()
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 656, in cleanup
    self._deleteFilesInDir(GlobalVals.DEFAULT_CACERT_LOCATION)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 675, in _deleteFilesInDir
    self._removeFile(filePath)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 652, in _removeFile
    os.remove(file)
OSError: [Errno 21] Is a directory: '/etc/ipsec.d/cacerts/save'

Cause

A manual creation of a folder named save that was created under /etc/ipsec.d/cacerts/ interfered with the checks required for security certificates renewal.

Resolution

Workaround:

  1. Log in to the VPLEX Management Server using the service account credentials:
login as: service
Using keyboard-interactive authentication.
Password:
service@vplex01:~>

 

  1. Go to the /etc/ipsec.d/cacerts/ path and check for a folder called save:
service@vplex01:~> cd /etc/ipsec.d/cacerts/
service@vplex01:/etc/ipsec.d/cacerts> ll save

 

  1. Delete the file with the name save:
service@vplex01:/etc/ipsec.d/cacerts> rm -rf save
  1. Delete the old certificates before running the security configure-certificate command as follows:
service@vplex01:~> rm /etc/ipsec.d/*/*pem* 
  1. Go to the VPLEXCLI and run the security configure-certificates command again and check it ran successfully:
VPlexcli:/> security configure-certificates
  1. If the command still fails, contact Dell Customer Support and refer to this article. 

Affected Products

VPLEX Series

Products

VPLEX Series, VPLEX VS2, VPLEX VS6
Article Properties
Article Number: 000168670
Article Type: Solution
Last Modified: 12 Dec 2025
Version:  3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.