Rabbitmq server certificate with alias name XYZ is not trusted

[Scott Caryer]

I recently recieved this red error message on 2 of my 3 OV appliances. I can not see any certificates associated with the alias or host in the Management section within the Security area where i would have the option to delete it. My OV appliances are all running version 4.10.01-0348545. I have no idea what RabbitMQ is other than knowing it is a open source messanger brooker (Whatever that really means). Any feedback woudl be great!

Thanks Forum! Scott 

[Suvamay]

Hello Scott,

Please find the below advisory. Though it is not matching your OV version. Please follow the below. If its remains same please log a support ticket with HPE for further support.

Steps to Regenerate the RabbitMQ Certificate

First, make a OneView backup before continuing with any other changes. Then use either of the following REST Call or Powershell commands:

• REST CALL: DELETE

  https://example.com/rest/certificates/ca/default 

Note: Details about using the REST interface for OneView 4.0 can be found in Online Help or for OneView 3.0 can be found from this link:

http://h17007.www1.hpe.com/docs/enterprise/servers/oneview3.0/cicf-api/en/api-docs/current/index.html

OR

• POWERSHELL COMMAND: Use the PowerShell library to regenerate the SCMB certificate.
  • PowerShell example:
  • Powershell Command: Remove-HPOVSCMBCertificate

Note: Details on how to install and use the OneView PowerShell library can be found here:

https://github.com/HewlettPackard/POSH-HPOneView/wiki 

Next, run Get-HPOVSCMBCertificate.

Note: The Remove-HPOVSCMBCertificate command will report an error if SCMB certificates have never been created. This error can be ignored.

Advisory: https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00043604en_us&docLocale=en_US

Thanks

[Scott Caryer]

Thanks for the reply. Using Powershell, I was able to "Import-Module Oneview.410" successfully. I was then able to run some PowerShell scripts. I was able to connect to my Oneview appliance. Looking good so far. The Get-HPOVSCMBCertficate throws an error stating, "that it is not a name of a cmdlet".  I then ran the Remove-HPOVSCMBCertifate command and it seems to load and run, but errors out when I say Yes or No it timesout. Thoughts?