VPLEX：security configure-certificate 命令執行失敗，並顯示「Is a directory」錯誤

可使用 security configure-certificate 命令執行失敗，並出現下列錯誤：

VPlexcli:/> security configure-certificates
 security configure-certificates:  Evaluation of <<security configure-certificates>> failed.
 cause:                            Command execution failed.
 cause:                            21
 cause:                            Is a directory

在用戶端記錄中看到的錯誤：

2018-08-08 19:37:37,770 INFO  [Thread-57] service_localhost_T20810: security configure-certificates
2018-08-08 19:37:37,771 INFO  [Thread-57] audit: security configure-certificates
2018-08-08 19:37:37,892 ERROR [DefaultCommandHandler-Thread-3] security configure-certificates: Failed to configure certificates: Validation error: Certificates already present in the system.                    Delete old certificates before configuring the system with                    new certificates.
2018-08-08 19:37:37,967 ERROR [DefaultCommandHandler-Thread-3] ConfigureCertificatesCmd: 21
Traceback (most recent call last):
  File "/opt/emc/VPlex/jython2.7b4/LibExt/yyapi.py", line 322, in _execute
    result = self._execute_(shell,context,args)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 148, in _execute_
    cfgCert.restore()
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 241, in restore
    self.cleanup()
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 656, in cleanup
    self._deleteFilesInDir(GlobalVals.DEFAULT_CACERT_LOCATION)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 675, in _deleteFilesInDir
    self._removeFile(filePath)
  File "/opt/emc/VPlex/jython2.7b4/LibExt/AutoBundles/prodscripts.jar/configureCertificates.py", line 652, in _removeFile
    os.remove(file)
OSError: [Errno 21] Is a directory: '/etc/ipsec.d/cacerts/save'

手動建立名為的資料夾 save 建立於 /etc/ipsec.d/cacerts/ 干擾了安全證書續訂所需的檢查。

因應措施：

1. 使用 Dell 顯示器登入 VPLEX 管理伺服器 service 帳戶登入資料：

login as: service
Using keyboard-interactive authentication.
Password:
service@vplex01:~>

2. 前往 /etc/ipsec.d/cacerts/ 路徑並檢查名為的資料夾 save：

service@vplex01:~> cd /etc/ipsec.d/cacerts/
service@vplex01:/etc/ipsec.d/cacerts> ll save

3. 刪除名稱為 save：

service@vplex01:/etc/ipsec.d/cacerts> rm -rf save

4. 請先刪除舊憑證，再執行 security configure-certificate 命令如下：

service@vplex01:~> rm /etc/ipsec.d/*/*pem* 

5. 前往 VPLEXCLI，並執行 security configure-certificates 再次執行命令並檢查其成功執行：

VPlexcli:/> security configure-certificates

6. 如果命令仍失敗，請聯絡 Dell 客戶支援並參閱本文。