PowerStore: Pre upgrade health check (PUHC) to detect the reset_certificates REST endpoint issue
Summary: If a user specifically requests to renew the Management_HTTP internal certificate using the /api/rest/x509_certificate/reset_certificates REST endpoint, the entire third-party certificate chain will be removed (deleted). The Pre upgrade health check (PUHC) off_release_removed_third_party_certificate_check detects this issue. ...
Symptoms
Pre upgrade health check (PUHC) fails with the following error: "Third party certificate is missing in the database. KB#000261401. Please contact your service provider. (off_release_removed_third_party_certificate_check)".
The health check is an off-release PUHC check that is contained in the Health Check thin package. See the Additional Info section of this article for information about the Health Check thin package.
As seen from the PowerStore Manager user interface (UI):
Cause
A recent installation of a Certificate Renewal Thin Package exposed this issue as the /api/rest/x509_certificate/reset_certificates REST endpoint is used by it.
Impact
All PowerStore REST calls made internally to the affected cluster will fail automatic authentication.
Inability to create and download an off-appliance backup of the keystore archive file.
Non-disruptive upgrades (NDUs) will fail in a multi-appliance cluster configuration.
Resolution
To resolve this issue, contact technical support for assistance. Reference KB# 000261401 or expedited attention and resolution.
Additional Information
KB 000214752 PowerStore: Landing Page for In Market (off-release) System Health Checks lists all the health checks in the Health Check thin package.