VASA renew

[Sanja1]

In vCentar I am getting "VASA Provider certificate expiration alarm" message. VASA is about to expire. What is the process of renewing certificate?

VASA was issued by storage provider and connected to vCentar.

[Satish04 · Accepted solution]

Hi Sanja1,

To renew a VASA (vSphere APIs for Storage Awareness) provider certificate for HPE Primera storage, you need to follow below steps:

1. Access the vCenter Server using the vSphere Client or the vSphere Web Client, depending on the version you are using.

2. Navigate to the vCenter Server's "Home" page or the "Storage" tab to find the HPE Primera VASA Provider.
3. Look for the alarm or notification indicating the expiration of the VASA Provider certificate.
This alarm will help you identify the specific VASA Provider instance.

4. Access the HPE Primera storage User Interface (HPE Primera UI), and generate a new CSR.
Provide the necessary information, such as the common name, organization details, and contact information.

5. Take the generated CSR and submit it to a trusted certificate authority.
This CA can be an internal CA within your organization or a public CA, depending on your requirements.
Follow the CA's specific instructions for certificate renewal.

6. Once the CA approves the CSR and completes the certificate signing process, they will provide you with a renewed certificate file.

7. Log in to the HPE Primera storage management interface and navigate to the certificate management section.
Import the renewed certificate file into the appropriate location or upload it using the provided interface.
Follow the storage system's instructions for importing the renewed certificate.

8. After importing the renewed certificate, confirm that the VASA Provider shows the new certificate information and that the expiration alarm is no longer active.

9. Once the renewed certificate is in place, ensure that vCenter can successfully connect to the HPE Primera storage system. Verify that the vCenter server can access the storage system and that the VASA Provider functions correctly.

Do get back to us, if you need further help.

Regards,
Satish

[Sanja1]

Thank you. DO I need to delete curent one before creating new one?

[Satish04]

Hi Sanja1,

It is not necessary to manually delete the existing VASA provider certificate.
After importing the new certificate, you need to replace the existing VASA provider certificate with the new one.

Hope this helps.

Regards,
Satish