Showing posts with label SSL. Show all posts
Showing posts with label SSL. Show all posts

Thursday, November 7, 2019

The vRealize Operations SSL Certificate Expiration Issue


[UPDATE #2 Nov. 18 2019] The KB is available again. Please subscribe to the KB for updates regarding the available .pak files, and engage VMware GSS if you have further questions/concerns.

[UPDATE #1 Nov. 18 2019] The linked KB article below has been pulled from public consumption due to an issue found in the mentioned .pak file. I will update this post as soon as the KB is re-published, or a new article is posted.

The VMware Product team has been notifying customers about an issue that could potentially impact your vROPs instance, causing the tool to become inoperable. See the notice and summary below. The key take away here is the initial install date. Please reference VMware KB 71018 for more information and steps to remediate.

The notice states, "Customers that have installed vRealize Operations v6.x and above may be impacted by the internal SSL Gemfire certificate expiration on November 19, 2019. The internal certificates for vRealize Operations Manager are set to expire five years after its initial installation. For example, if vRealize Operations 6.0.0 was installed on November 19, 2014, and incrementally upgraded to later versions, the internal SSL certificate will expire on November 19, 2019.

There is a required PAK file update that has been released for customers running vRealize Operations v6.x and above that renews the certificate to prevent it from going into system inoperability."

To summarize:
  • All vROPs instance 6.0 and newer are impacted
  • There is no fix for versions 6.0 - 6.2. You must upgrade to 6.3 or higher.
  • The internal Gemfire SSL cert expires 5 years after the initial install of vROPs. The first of these will start happening November 19th. 
  • When the cert expires, you cannot view any data, though collections will continue to run.
  • Upgrades to vROPs have no impact on the cert, so the initial expiration date will still apply, even if you've upgraded vROPs several times since installation.
Share:

Thursday, May 15, 2014

Logging into Horizon Workspace fails: We were unable to authenticate you

This error can be pesky as it is a bit misleading. The full error will read something similar to
We were unable to authenticate you. Please check your credentials and try again.

Furthermore, you may notice whenever you load the Workspace login page a notice at the top that reads
Identity provider's url scheme mismatches with that of the request. This could happen when the request is received on https and the Identity provider's is running on http.

This behavior is usually caused by our IdP trying to use port 443 but SSL authentication is disabled. To resolve this issue:

  1. Login to the connector-va web page

  2. Click on Identity Providers

  3. Verify the IdP hostname is correct and using port 443

  4. Check the box to Use SSL for end-user authentication

  5. Click Save




 

 

Give that user's login another go and you should be on your way.
Share: