important links for expired certificates in vCenter server

Marc Pauls  7 November 2023 14:14:20

https://vninja.net/2022/08/08/expired-vmware-vcenter-7-certificates/
https://kb.vmware.com/s/article/76719
https://vkasaert.com/2023/02/13/expired-vcenter-certificates-how-to-get-back-in-the-game/

to investige or expired certificates use:

for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo "[*] Store :" $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $store --text | grep -ie "Alias" -ie "Not After";done;

restarting services with:

service-control --stop --all && service-control --start --all

in rare cases use "lsdoctor":  python lsdoctor.py --stalefix and  python lsdoctor.py --trustfix (depending what python "lsdoctor.py -l" shows)

also "fixsts" may help
Comments Disabled