topic Re: OneView Certificate Error in HPE OneView

OneView Certificate Error

Chris_L1 — Tue, 03 Oct 2017 11:35:05 GMT

Issue with OV ver. 3.10.07-0310774 - all set to recommended HPE specs

I am receiving the following error in OneView:
Client Certificate Generation.
Issue: Error occurred while generating client certificate.
Error occurred while creating Key pairs.
Resolution: Please retry the operation.

We have two OV instances in our organization - both are identical in setup - only difference is the IP addresses - this is only occurring on one of the instances.

Went through PowerShell and verified that all certs were identical on both systems -
No HPOV Trusted Domain Certs
Only HPOV Self-Signed Certs

Using PowerShell, removed HPOV Self-Signed Cert and verified that it was deleted. No change - still receiving error.

Regenerated/reinstalled new Self-Signed Cert and verified that it was present. No change - still receiving error.

Checked Self-Signed Cert, noticed that its date was same as the one previously deleted.

Issue started back with OV Ver. 2.9 and has continued. Error occurs every five minutes and I receive two of the same errors. The errors are locked and filling the "Activity" section - currently have over 13k messages that cannot be deleted.

Also - what is the operation that I need to retry? Generating the client cert or creating key pairs and how can I do this via PowerShell?

Thanks in advance.

Re: OneView Certificate Error

Chris_L1 — Tue, 03 Oct 2017 11:43:52 GMT

Note: We are also running Global Dashboard ver. 1.20 and this appliance shows as "Failed" in the GD. We had the same error previously and could not remove it from GD so we rebuilt the GD and tried to re-add it. It is currently NOT in the GD.

Re: OneView Certificate Error

ChrisLynch — Tue, 03 Oct 2017 13:45:13 GMT

You need to regenerate the SCMB certificate. Use the Remote-HPOVScmbCertificate and then the Get-HPOVScmbCertificates Cmdlets.

Re: OneView Certificate Error

Chris_L1 — Wed, 11 Oct 2017 15:39:03 GMT

Still having the issue - I get the following error:

Get-HPOVScmbCertificates : The requested resource '/rest/certificates/client/rabbitmq/keypair/default' could not be found. Please supply a valid and unique common name and try again.

on anything I try - this includes giving a specific location, using "-AsSecureString", not using "-AsSecureString" or just a simple "Get-HPOVScmbCertificates" command. Looking for the next step and have tapped my resources here..

Thanks

Re: OneView Certificate Error

ChrisLynch — Wed, 11 Oct 2017 15:45:28 GMT

Hmm... I just tested this with a 3.10 appliance with the current 3.10 library and did not get the exception message you did. Can you go to http://github.com/HewlettPackard/POSH-HPOneView/issues and open a new issue there so we can triage?

Re: OneView Certificate Error

Chris_L1 — Wed, 11 Oct 2017 17:47:36 GMT

Requested GitHub issue #295 has been posted.

Re: OneView Certificate Error

micke_christen — Thu, 18 Jan 2018 07:10:31 GMT

Did you solve this?

I have seen this problem just now.

/Mikael

Re: OneView Certificate Error

ChrisLynch — Thu, 18 Jan 2018 15:03:21 GMT

After doing some research on this topic, it appears that this happens with an appliance that has been upgraded multiple time from prior versions and that this is actually the SCMB certificate. So, the advice here is to remove and regenerate the SCMB certificates.

You can do this with the PowerShell library:

Remove-HPOVScmbCertificate
then Get-HPOVScmbCertificate

Re: OneView Certificate Error

Bart_Heungens — Thu, 01 Mar 2018 16:47:55 GMT

Hi Chris,

When executing the Remove-HPOVScmbCertificate command I get follwing error:

Remove-HPOVScmbCertificate : The operation has timed out
At line:1 char:1
+ Remove-HPOVScmbCertificate
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Remove-HPOVScmbCertificate], WebException
+ FullyQualifiedErrorId : WebException,Remove-HPOVScmbCertificate

I have the latest POSH libraries installed... Any idea?

Kr,

Bart

Re: OneView Certificate Error

HunterT — Mon, 09 Apr 2018 14:28:27 GMT

I receive the same error as well when running the "Remove-HPOVScmbCertificate" command. Our environment has been upgraded to the latest version, all the from 1.2 when we originally installed.

Re: OneView Certificate Error

John Bigg — Tue, 10 Apr 2018 08:50:40 GMT

I would not worry too much if Remove-HPOVScmbCertificate times out. This is not that uncommon and does not mean the command has failed. You can check if the command worked by using Get-HPOVScmbCertificate to retrieve the certificate.