OneView Certificate Error

[Chris_L1]

Issue with OV ver. 3.10.07-0310774 - all set to recommended HPE specs

I am receiving the following error in OneView:
Client Certificate Generation.
Issue: Error occurred while generating client certificate.
Error occurred while creating Key pairs.
Resolution: Please retry the operation.

We have two OV instances in our organization - both are identical in setup - only difference is the IP addresses - this is only occurring on one of the instances.

Went through PowerShell and verified that all certs were identical on both systems -
No HPOV Trusted Domain Certs
Only HPOV Self-Signed Certs

Using PowerShell, removed HPOV Self-Signed Cert and verified that it was deleted. No change - still receiving error.

Regenerated/reinstalled new Self-Signed Cert and verified that it was present. No change - still receiving error.

Checked Self-Signed Cert, noticed that its date was same as the one previously deleted.

Issue started back with OV Ver. 2.9 and has continued. Error occurs every five minutes and I receive two of the same errors. The errors are locked and filling the "Activity" section - currently have over 13k messages that cannot be deleted.

Also - what is the operation that I need to retry? Generating the client cert or creating key pairs and how can I do this via PowerShell?

Thanks in advance.

[Chris_L1]

Note:  We are also running Global Dashboard ver. 1.20 and this appliance shows as "Failed" in the GD.  We had the same error previously and could not remove it from GD so we rebuilt the GD and tried to re-add it.  It is currently NOT in the GD.

[ChrisLynch]

You need to regenerate the SCMB certificate.  Use the Remote-HPOVScmbCertificate and then the Get-HPOVScmbCertificates Cmdlets.

[Chris_L1]

Still having the issue - I get the following error:

Get-HPOVScmbCertificates : The requested resource '/rest/certificates/client/rabbitmq/keypair/default' could not be found. Please supply a valid and unique common name and try again.

on anything I try - this includes giving a specific location, using "-AsSecureString", not using "-AsSecureString" or just a simple "Get-HPOVScmbCertificates" command.  Looking for the next step and have tapped my resources here..

Thanks

[ChrisLynch]

Hmm... I just tested this with a 3.10 appliance with the current 3.10 library and did not get the exception message you did.  Can you go to http://github.com/HewlettPackard/POSH-HPOneView/issues and open a new issue there so we can triage?

[Chris_L1]

Requested GitHub issue #295 has been posted.

[micke_christen]

Did you solve this?

I have seen this problem just now.

/Mikael

[ChrisLynch]

After doing some research on this topic, it appears that this happens with an appliance that has been upgraded multiple time from prior versions and that this is actually the SCMB certificate.  So, the advice here is to remove and regenerate the SCMB certificates.

You can do this with the PowerShell library:

1. Remove-HPOVScmbCertificate
2. then Get-HPOVScmbCertificate

[Bart_Heungens]

Hi Chris,

When executing the Remove-HPOVScmbCertificate command I get follwing error:

Remove-HPOVScmbCertificate : The operation has timed out
At line:1 char:1
+ Remove-HPOVScmbCertificate
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Remove-HPOVScmbCertificate], WebException
    + FullyQualifiedErrorId : WebException,Remove-HPOVScmbCertificate

I have the latest POSH libraries installed... Any idea?

Kr,

Bart

[HunterT]

I receive the same error as well when running the "Remove-HPOVScmbCertificate" command.  Our environment has been upgraded to the latest version, all the from 1.2 when we originally installed.