AppSync：vCenter 失去與 Appsync 的連線能力，因為 cacert 檔案已損毀

摘要: AppSync 失去與 vCenter 的連線能力，原因是 cacert 檔案損毀。

本文章適用於 本文章不適用於 本文無關於任何特定產品。 本文未識別所有產品版本。
查看其他資源

症狀

1.失去與 vCenter 的連線。
2.重新探索 vCenter 失敗，我們也無法移除 vCenter。
3.重設登入資料快顯對話方塊會顯示以下錯誤：
  
Exception in VCConnectionCache:failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed

檢閱伺服器記錄中有關試用時間戳記的事件如下所示：
  
<TimeStamp> DEBUG [default task-29] [com.emc.archway.securedcommands.ArchwayEJBInterceptor] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> Bean level security checking for public java.util.UUID com.emc.archway.securedcommands.vmware.ValidateCreateVCenterServerCommandSecuredBean.validateAndCreate(com.emc.archway.context.ExecutionContext,com.emc.archway.objectmodel.host.vcenterserver.VCenterServer) throws java.rmi.RemoteException,com.emc.archway.errorMessages.ObjectAlreadyExistsException,com.emc.archway.errorMessages.ArchwayException,com.emc.archway.acl.AuthorizationConfigException

<TimeStamp> DEBUG [default task-29] [com.emc.archway.service.vc.VCEntityLockCommandBean] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> EJB default - 1Locking entityID:https://FQDN/sdk for update

<TimeStamp> INFO [default task-29] [com.emc.archway.service.vc.VCConnectionCache] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> getURLConnection::https://FQDN/sdk creating a new connection to url:https://vmcsxxxx.xxx.co.xx/sdk as no  cached connection available

<TimeStamp> INFO [default task-29] [com.emc.archway.service.vc.BasicVCConnection] [Appsync Server Name] [] 2b3e6a5c-f7e2-41f7-ba01-229fcb6d6417->>> establishing TLS connection

<TimeStamp> DEBUG [default task-29] [com.emc.archway.service.vc.EnableSecurity] [Appsync Server Name] [] 2b3e6a5c-f7e2-41f7-ba01-229fcb6d6417->>> getTrustMangerForCertificates using keystoreName: install_dir:\EMC\AppSync\jboss\_jre\lib\security\cacerts

<TimeStamp> ERROR [default task-29] [com.emc.archway.service.vc.VCConnectionCache] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> Exception in VCConnectionCache:failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed

<TimeStamp> INFO [default task-29] [com.emc.archway.service.eventservice.EventServiceBean] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> EVENT [VM_000156]:  Unable to create a new connection to vCenter server:https://FQDN/sdk failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed(METADATA: TYPE-ERROR, TIME-Time-Stamp.738+0400NATIVETIME-2022-05-17 <TimeStamp>, HOST-Appsync Server Name, PHASE-, THREAD=default task-29, USER-s911987, CATEGORY-GENERIC, SESSIONID-iGywYTLkg9bspkRYZYlvF9gD8vP78L0__2c6_0N2)

<TimeStamp> INFO [default task-29] [com.emc.archway.service.vc.VCEntityLockCommandBean] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> EJB default - 1Unlocking entityID:https://FQDN/sdk for update

<TimeStamp> INFO [default task-29] [com.emc.archway.service.vc.VCServiceBean] [Appsync Server Name] [] 0dbfcdd0-69a8-43b2-9555-e8133aa932ca->>> Exception while getting connection to vc ::Unable to create a new connection to vCenter server:https://FQDN/sdk. Error: failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed: com.emc.archway.service.eventservice.exceptions.ConnectionManagerException: Unable to create a new connection to vCenter server:https://FQDN/sdk. Error: failed to connect: Keystore was tampered with, or password was incorrect : Password verification failed
    at deployment.archway-ear.ear.vcservice-4.3.0.0-SNAPSHOT.jar//com.emc.archway.service.vc.VCConnectionCache.getConnection(VCConnectionCache.java:236)

原因

在上述情況下，第三方應用程式會損壞 cacert 檔案，導致發生此問題。

解析度

請遵循下列步驟，以健全的 cacert 檔案驗證和更換損毀的 cacer 檔案。

1.驗證 ca-cert 檔案是否已損毀。
 
在 AppSync 伺服器的 cmd(admin) 中執行下列命令：
  
install_dir:\EMC\AppSync\jre\bin>keytool.exe -list -v -keystore Install_dir:\emc\appsync\jboss\_jre\lib\security\cacerts (enter changeit for the pwd).

 

如果上述命令顯示錯誤「Keystore was tampered with, or password was incorrect : Password verification failed:」這個錯誤訊息，則檔案已損毀且需要更換，因此請繼續。

2.驗證更換檔案是否狀況良好。
 
在 AppSync 伺服器的 cmd(admin) 中執行下列命令：
  
install_dir:\EMC\AppSync\jre\bin>keytool.exe -list -v -keystore install_dir:\emc\appsync\jre\lib\security\cacerts (enter changeit for the pwd)  

 

上述命令應可成功執行。(如果發生此錯誤，需要聯絡支援部門)。

3.將損毀的檔案更換為健全的檔案：
 
在 AppSync 伺服器的 cmd(admin) 中執行下列命令
  
copy install_dir:\EMC\AppSync\jre\lib\security\cacerts install_dir:\EMC\AppSync\jboss\_jre\lib\security

 


如果以上命令無法運作，請從以下內容手動複製 cacert：
  

install_dir:\EMC\AppSync\jre\lib\security\cacerts
to
install_dir:\EMC\AppSync\jboss\_jre\lib\security

 


4.匯入新更換的 ca-cert 檔案。
 

在 AppSync 伺服器的 cmd(admin) 中執行下列命令
 

install_dir:\EMC\AppSync\jboss\_jre\bin>keytool.exe -importcert -file install_dir:\EMC\AppSync\jboss\_jre\lib\security\cas.crt -keystore install_dir:\EMC\AppSync\jboss\_jre\lib\security\cacerts -storepass changeit -alias appsync -noprompt


 

5.重新啟動服務，並嘗試登入 AppSync


注意：

  • 請務必將 install_dir 更換為 AppSync 安裝目錄 (無論在何處提到)。
  • (建議您從 install_dir:\EMC\AppSync\jboss\_jre\lib\security 備份 cacert，以便在檔案再次損毀時避免再次執行相同的命令。)

產品

AppSync, AppSync
文章屬性
文章編號: 000199992
文章類型: Solution
上次修改時間: 14 5月 2026
版本:  6
向其他 Dell 使用者尋求您問題的答案
支援服務
檢查您的裝置是否在支援服務的涵蓋範圍內。