https://community.hpe.com/t5/hpe-oneview/oneview-for-vcenter-certificate-hell/m-p/7172135#M7438 <P>This is a fresh setup of a VMware vSAN Cluster with DL380 Gen10.<BR />Running OneView 7.10 en want to make use of the Firmware update feature within vLCM<BR />vCenter version 7.0.3.00800<BR />Deployed a fresh OV4VC version 11.0.0 release&nbsp;&nbsp;1-20211210.150305</P><P>First deployement: "failed to deploy OVF"<BR />"Standard" inter solution/workaround to deploy directly on to host: fails (something about not permitted, because managed by vcenter)<BR />Again deploy in vCenter but now choosing a host isntead of the DRS cluster: succes ... well, partially.<BR />After booting up and doing the configuration it fails to add vCenter.<BR />Reason: the DNS servers were not set from the template while I definitly filled them out in the proper comma separated format !<BR />So every is set, plugin in vCenter, added the OneView appliance, trying to add the certifacte before registring a Software Depot ... "Failed to add HPE OneView for VMware vCenter certificate into vCenter Trust store.... etc"<BR />And ofcourse: revoking the certificate (becausethe button got blue) also fails.</P><P>I am loosing my mind.<BR />I deployed the SAME release of this Appliance just a couple of weeks ago at another customer, same vCenter version, same OneView version, also with same partial network configuration after deployement, but at least there I could add certificate for the Software Depot.</P><P>I even re-deployed the ov4vc appliance with exactly the same failure when adding the certificate.</P><P>So, what the ... is wrong here !</P><P>I am really starting to dislike this product, it is by times hard to deploy and when things go wrong, there are no hints or logs to troubleshoot what went wrong.<BR />Why isn't there any back door entry to lookup logs ot try to fix the certificate chain ???<BR />Why is HPE making me hate this product ?</P><P>And if iLO Amplifier can hook directly into vCenter and make an SPP available, why can't OneView do this without this "shoe-string" solutions ?</P> Tue, 16 Aug 2022 03:19:03 GMT Tinux 2022-08-16T03:19:03Z https://community.hpe.com/t5/hpe-oneview/oneview-for-vcenter-certificate-hell/m-p/7172135#M7438 <P>This is a fresh setup of a VMware vSAN Cluster with DL380 Gen10.<BR />Running OneView 7.10 en want to make use of the Firmware update feature within vLCM<BR />vCenter version 7.0.3.00800<BR />Deployed a fresh OV4VC version 11.0.0 release&nbsp;&nbsp;1-20211210.150305</P><P>First deployement: "failed to deploy OVF"<BR />"Standard" inter solution/workaround to deploy directly on to host: fails (something about not permitted, because managed by vcenter)<BR />Again deploy in vCenter but now choosing a host isntead of the DRS cluster: succes ... well, partially.<BR />After booting up and doing the configuration it fails to add vCenter.<BR />Reason: the DNS servers were not set from the template while I definitly filled them out in the proper comma separated format !<BR />So every is set, plugin in vCenter, added the OneView appliance, trying to add the certifacte before registring a Software Depot ... "Failed to add HPE OneView for VMware vCenter certificate into vCenter Trust store.... etc"<BR />And ofcourse: revoking the certificate (becausethe button got blue) also fails.</P><P>I am loosing my mind.<BR />I deployed the SAME release of this Appliance just a couple of weeks ago at another customer, same vCenter version, same OneView version, also with same partial network configuration after deployement, but at least there I could add certificate for the Software Depot.</P><P>I even re-deployed the ov4vc appliance with exactly the same failure when adding the certificate.</P><P>So, what the ... is wrong here !</P><P>I am really starting to dislike this product, it is by times hard to deploy and when things go wrong, there are no hints or logs to troubleshoot what went wrong.<BR />Why isn't there any back door entry to lookup logs ot try to fix the certificate chain ???<BR />Why is HPE making me hate this product ?</P><P>And if iLO Amplifier can hook directly into vCenter and make an SPP available, why can't OneView do this without this "shoe-string" solutions ?</P> Tue, 16 Aug 2022 03:19:03 GMT https://community.hpe.com/t5/hpe-oneview/oneview-for-vcenter-certificate-hell/m-p/7172135#M7438 Tinux 2022-08-16T03:19:03Z https://community.hpe.com/t5/hpe-oneview/oneview-for-vcenter-certificate-hell/m-p/7172142#M7439 <P style="margin: 0;"><STRONG>System recommended content:</STRONG></P> <P style="margin: 0;">1. <A href="https://hpe.to/6607zCiMh" target="_blank" rel="noopener">HPE OneView for VMware vCenter 11.0 User Guide | Generating the HPE OneView for VMware vCenter certificate and publishing it to vCenter</A></P> <P style="margin: 0;">2. <A href="https://hpe.to/6608zCi36" target="_blank" rel="noopener">HPE OneView for VMware vCenter 10.2 User Guide | Adding the HPE OneView for VMware vCenter trusted root certificate to vCenter</A></P> <P style="margin: 0;">&nbsp;</P> <P style="margin: 0;">Please click on "Thumbs Up/Kudo" icon to give a "Kudo".</P> <P style="margin: 0;">&nbsp;</P> <P style="margin: 0;">Thank you for being a HPE valuable community member.</P> Fri, 12 Aug 2022 15:25:01 GMT https://community.hpe.com/t5/hpe-oneview/oneview-for-vcenter-certificate-hell/m-p/7172142#M7439 support_s 2022-08-12T15:25:01Z https://community.hpe.com/t5/hpe-oneview/oneview-for-vcenter-certificate-hell/m-p/7172170#M7443 Can you please provide the exact errors you are getting? Screenshots would also be helpful. Have you checked for any custom vCenter permissions that are blocking you? Sat, 13 Aug 2022 00:03:26 GMT https://community.hpe.com/t5/hpe-oneview/oneview-for-vcenter-certificate-hell/m-p/7172170#M7443 ChrisLynch 2022-08-13T00:03:26Z