OneView for VMware vCenter - Certificat issue

[Nalkhael]

Hello,

I've an issue when uploading a new certificat in Oneview for vCenter (10.2 and vCenter 6.7) :

"The certificate is already imported, bad certificate or is in the wrong format"

The cert is Base-64 and in x509 format

Where can I found the exact issue ? Can I get a log or something more precise ?

Thanks in advance.

[support_s]

System recommended content:

1. HPE OneView for VMware vCenter 11.0 Installation Guide | Checklist for HPE OneView for VMware vCenter Installation

2. HPE OneView for VMware vCenter 11.1.0 Installation Guide | Checklist for HPE OneView for VMware vCenter Installation

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[support_s]

Hi

Looks like a user permission issue. Please check the user has global privileges in vCenter and the user a part of Administrator group. If not a part of Administrator group, add the user to it and verify be importing a certificate. 

[Nalkhael]

Hello,

I've tried with the administrator@vsphere.local account.

Best regards,

[Vinky_99]

@Nalkhael 

It might be possible that the certificate you are trying to import is not in the correct format or may have some issue with its content. To get more information about the issue, you can check the logs of OneView for vCenter.

You can access the OneView for vCenter logs by following these steps:

1. Open the vSphere Web Client.
2. Navigate to the vCenter Server.
3. Click on the "Monitor" tab.
4. Click on "Logs".
5. Select "OneView for vCenter" from the drop-down list.
6. Click on "Export System Logs".

This will export the logs to a file that you can then review for any error messages or more detailed information about the certificate issue. Look for any log entries related to the certificate upload process, which may give you more insight into the specific problem.

Hope this helps!

[Nalkhael]

Hello,

Thanks for your reply, but sadly I can't find this menu in the vCenter, maybe it's because I'm in vSphere version 6.7 ?

I have monitor tab for the VC but not the log part. I see I can export log in the vCenter part, but I can't find OV4VC in the drop down menu.

Best regards,

[Vinky_99 · Accepted solution]

@Nalkhael 

Sorry, I missed your post. 

It seems that the log export functionality I mentioned may not be available in the vSphere Web Client for the OneView for vCenter (OV4VC) plugin. In that case, you may need to check the logs directly within the OV4VC appliance or contact the support team for further assistance.

To access the logs within the OV4VC appliance, you can try the following steps:

1. Log in to the OV4VC appliance using SSH or a console connection.
2. Navigate to the log directory. The default location is usually '/var/log/ov4vc/'.
3. Look for log files related to OV4VC or certificate management. Common log files may include 'ov4vc.log', 'ov4vc_task.log', or similar names.
4. Open the log files using a text editor or the 'tail' command to view the log entries.

Reviewing the OV4VC logs should provide more detailed information about the certificate issue and help identify the exact problem. If you're unable to find the logs or need further assistance, I recommend reaching out to the support team for the OneView for vCenter plugin or the vendor providing the OV4VC solution. They should be able to provide specific guidance and help you troubleshoot the certificate upload problem.

[Nalkhael]

Hello,

Thanks for your reply, but I can't open a ssh session, the prompt is asking for a security code wich is not the admin password.

Nevertheless, I will mark the subject as closed, because I have desperatly try again to import the certificate and its worked. I don't know why it failed previously, the certificate was totaly the same.

I noticed the vCenter plugin was a bit stuck and prompt an error, then a success when I imported the root cert ...

Thanks for all !

[Sunitha_Mod]

Hello @Nalkhael, 

That's excellent! 

We are extremely glad to know the problem has been resolved and we appreciate you for keeping us updated.