OPERATIONAL DEFECT DATABASE
...
...
When we click on Update manager tab we get an error message "Problem occurred while connecting to the Update Manager server. See the vSphere Web Client logs for more details". updatemgr-utility.log:[2019-11-19 12:19:35,876 INFO] Install Key store for Jetty[2019-11-19 12:19:36,905 INFO] Keystore installed successfully.[2019-11-19 12:19:37,203 INFO] Updating VUM extension with VC[2019-11-19 12:19:37,433 INFO] Updating CM service info[2019-11-19 12:19:37,433 INFO] Enter updateCmServiceInfo[2019-11-19 12:19:37,433 INFO] Client's property file: /usr/lib/vmware-updatemgr/firstboot/updatemgr.properties[2019-11-19 12:19:37,625 ERROR] CM ReRegisterService failure. Exception is (cis.cm.fault.ComponentManagerFault) { dynamicType = <unset>, dynamicProperty = (vmodl.DynamicProperty) [], msg = '', faultCause = <unset>, faultMessage = (vmodl.LocalizableMessage) [], errorCode = 0, errorMessage = 'UNKNOWN'}[2019-11-19 12:19:37,625 ERROR] Unable to update CM service infocm.log2019-11-19T12:19:37.477+01:00 [pool-2-thread-1 [] INFO com.vmware.vim.lookup.client.SiteAffinityServerEndpointProvider (95e80f53-2516-487a-b704-d2760bbd8add)] Site affinity is disabled2019-11-19T12:19:37.602+01:00 [pool-2-thread-1 [] INFO com.vmware.vim.sso.client.impl.SiteAffinityServiceDiscovery (95e80f53-2516-487a-b704-d2760bbd8add)] Site affinity is disabled2019-11-19T12:19:37.621+01:00 [pool-2-thread-1 [] ERROR com.vmware.vim.sso.client.impl.SoapBindingImpl (95e80f53-2516-487a-b704-d2760bbd8add)] The SSL certificate of STS service cannot be verifiedcom.vmware.vim.sso.client.impl.ssl.UntrustedSslCertificateException: The SSL certificate of STS service cannot be verified at com.vmware.vim.sso.client.impl.ssl.StsSslTrustManager.validateServerIdentityWithThumbprint(StsSslTrustManager.java:227) ~[wstClient.jar:?]
The update manager service is failing to start since the STS_INTERNAL_SSL_CERT certificate is expired.
This issue can be resolve by replacing the STS_INTERNAL_SSL_CERT certificate with the MACHINE_SSL_CERT certificate.For more information, please refer to KB article to replace the STS_INTERNAL_SSL_CERT certificate: Process to replace the STS_INTERNAL_SSL_CERT with the machine cert from the MACHINE_SSL_CERT
Click on a version to see all relevant bugs
VMware Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
