Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Some article numbers may have changed. If this isn't what you're looking for, try searching all articles. Search articles

VxRail: Unable to import vCenter root certificates due to empty or corrupted CRL files

Summary: Unable to import vCenter root certificates due to empty or corrupted CRL file.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

When following Dell KB article VxRail: How to manually import vCenter SSL certificate on VxRail Manager  to manually import vCenter server certificate, errors display when converting the .r files: 
#openssl crl -outform der -in /tmp/certificates/certs/lin/e1f7261b.r1 -out newcrltfile1
unable to load CRL
OR  
#cert_util_init.py script failed with error:
Failed to find a matching root CA Certificate/CRL set that could verify vCenter certificate
OR
Failed to installed vCenter certificate with Chrome, error:
The Private Key for this Client Certificate is missing or invalid OR Invalid or corrupt file 

Cause

The vCenter root Certificate CRL file is empty or corrupted.

How to check if this is the issue:

  1. Download and extract the latest vCenter root certificate (https://kb.vmware.com/s/article/2108294This hyperlink is taking you to a website outside of Dell Technologies.).
  2. Check if any CRL file is empty or corrupted (screenshot below):
crl error

Or 

  1. SSH to PSC and vCenter with root credential
  2. Change to directory /etc/ssl/certs.
  3. Check if any .r file is 0 bytes or corrupted.

Resolution

To resolve this issue:

  1. If any empty or corrupted CRL file is found on the PSC and or vCenter, take OFFLINE snapshots for PSC and vCenter before proceeding.
  2. Follow instructions from VMware KB article 59555 to run fix_crl.sh script (https://kb.vmware.com/s/article/59555This hyperlink is taking you to a website outside of Dell Technologies.). The script should be performed on both VCSA and PSC.
  3. On vCenter, go to folder /etc/vmware-vpx/docRoot/certs.
  4. If the empty (0 bytes) or corrupted CRL files still exist, DELETE the file from this directory.
  5. Reboot PSC and vCenter after fix_crl.sh.
  6. Reimport vCenter root certificate to VxRail manager.

 

Affected Products

VxRail, VMware vCenter Server
Article Properties
Article Number: 000194669
Article Type: Solution
Last Modified: 22 Nov 2024
Version:  7
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.