AppSync：由于 cacert 文件损坏，vCenter 失去与 Appsync 的连接

摘要: AppSync 失去与 vCenter 的连接，原因是 cacert 文件损坏。

本文适用于 本文不适用于 本文并非针对某种特定的产品。 本文并非包含所有产品版本。
查看其他资源

症状

1.与 vCenter 的连接断开。
2.重新发现 vCenter 失败，我们也无法删除 vCenter。
3.重置凭据弹出对话框会显示以下错误：
  
Exception in VCConnectionCache:failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed

查看有关试用时间戳的服务器日志会显示如下事件：
  
<TimeStamp> DEBUG [default task-29] [com.emc.archway.securedcommands.ArchwayEJBInterceptor] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> Bean level security checking for public java.util.UUID com.emc.archway.securedcommands.vmware.ValidateCreateVCenterServerCommandSecuredBean.validateAndCreate(com.emc.archway.context.ExecutionContext,com.emc.archway.objectmodel.host.vcenterserver.VCenterServer) throws java.rmi.RemoteException,com.emc.archway.errorMessages.ObjectAlreadyExistsException,com.emc.archway.errorMessages.ArchwayException,com.emc.archway.acl.AuthorizationConfigException

<TimeStamp> DEBUG [default task-29] [com.emc.archway.service.vc.VCEntityLockCommandBean] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> EJB default - 1Locking entityID:https://FQDN/sdk for update

<TimeStamp> INFO [default task-29] [com.emc.archway.service.vc.VCConnectionCache] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> getURLConnection::https://FQDN/sdk creating a new connection to url:https://vmcsxxxx.xxx.co.xx/sdk as no  cached connection available

<TimeStamp> INFO [default task-29] [com.emc.archway.service.vc.BasicVCConnection] [Appsync Server Name] [] 2b3e6a5c-f7e2-41f7-ba01-229fcb6d6417->>> establishing TLS connection

<TimeStamp> DEBUG [default task-29] [com.emc.archway.service.vc.EnableSecurity] [Appsync Server Name] [] 2b3e6a5c-f7e2-41f7-ba01-229fcb6d6417->>> getTrustMangerForCertificates using keystoreName: install_dir:\EMC\AppSync\jboss\_jre\lib\security\cacerts

<TimeStamp> ERROR [default task-29] [com.emc.archway.service.vc.VCConnectionCache] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> Exception in VCConnectionCache:failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed

<TimeStamp> INFO [default task-29] [com.emc.archway.service.eventservice.EventServiceBean] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> EVENT [VM_000156]:  Unable to create a new connection to vCenter server:https://FQDN/sdk failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed(METADATA: TYPE-ERROR, TIME-Time-Stamp.738+0400NATIVETIME-2022-05-17 <TimeStamp>, HOST-Appsync Server Name, PHASE-, THREAD=default task-29, USER-s911987, CATEGORY-GENERIC, SESSIONID-iGywYTLkg9bspkRYZYlvF9gD8vP78L0__2c6_0N2)

<TimeStamp> INFO [default task-29] [com.emc.archway.service.vc.VCEntityLockCommandBean] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> EJB default - 1Unlocking entityID:https://FQDN/sdk for update

<TimeStamp> INFO [default task-29] [com.emc.archway.service.vc.VCServiceBean] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> Exception while getting connection to vc ::Unable to create a new connection to vCenter server:https://FQDN/sdk. Error: failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed: com.emc.archway.service.eventservice.exceptions.ConnectionManagerException: Unable to create a new connection to vCenter server:https://FQDN/sdk. Error: failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed
    at deployment.archway-ear.ear.vcservice-4.3.0.0-SNAPSHOT.jar//com.emc.archway.service.vc.VCConnectionCache.getConnection(VCConnectionCache.java:236)

原因

在上面的案例中，第三方应用程序碰巧损坏了 cacert 文件，从而导致了该问题。

解决方案

按照以下步骤验证损坏的 cacer 文件并将其替换为正常运行的 cacert 文件。

1.验证 ca-cert 文件是否损坏。
 
在 AppSync 服务器上的 cmd(admin) 中运行以下命令：
  
install_dir:\EMC\AppSync\jre\bin>keytool.exe -list -v -keystore Install_dir:\emc\appsync\jboss\_jre\lib\security\cacerts (enter changeit for the pwd).

 

如果上述命令出错并显示“Keystore was tampered with, or password was incorrect : Password verification failed:”错误，则表示文件损坏且需要更换，那么继续下一步。

2.验证替换文件是否运行正常。
 
在 AppSync 服务器上的 cmd(admin) 中运行以下命令：
  
install_dir:\EMC\AppSync\jre\bin>keytool.exe -list -v -keystore install_dir:\emc\appsync\jre\lib\security\cacerts (enter changeit for the pwd)  

 

上述命令应成功执行。（如果出现此错误，则需要联系支持部门）。

3.将损坏的文件替换为正常运行的文件：
 
在 AppSync 服务器上的 cmd(admin) 中运行以下命令
  
copy install_dir:\EMC\AppSync\jre\lib\security\cacerts install_dir:\EMC\AppSync\jboss\_jre\lib\security

 


如果上述命令无法正常运行，请手动复制 cacert：
  

install_dir:\EMC\AppSync\jre\lib\security\cacerts
to
install_dir:\EMC\AppSync\jboss\_jre\lib\security

 


4.导入新更换的 ca-cert 文件。
 

在 AppSync 服务器上的 cmd(admin) 中运行以下命令
 

install_dir:\EMC\AppSync\jboss\_jre\bin>keytool.exe -importcert -file install_dir:\EMC\AppSync\jboss\_jre\lib\security\cas.crt -keystore install_dir:\EMC\AppSync\jboss\_jre\lib\security\cacerts -storepass changeit -alias appsync -noprompt


 

5.重新启动服务并尝试登录 AppSync


提醒：

  • 需要将出现的所有 install_dir 替换为 AppSync 安装目录。
  • （建议从 install_dir:\EMC\AppSync\jboss\_jre\lib\security 备份 cacert，以便我们可以避免在文件再次损坏时再次运行相同的命令。）

产品

AppSync, AppSync
文章属性
文章编号: 000199992
文章类型: Solution
上次修改时间: 14 5月 2026
版本:  6
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。