"Unable to update CM service info" while connecting to the Update Manager 6.5
Article ID: 315277
Updated On:
Products
VMware vCenter Server
Issue/Introduction
Symptoms:
- When we click on Update manager tab we get an error message "Problem occurred while connecting to the Update Manager server. See the vSphere Web Client logs for more details".
updatemgr-utility.log:
[2019-11-19 12:19:35,876 INFO] Install Key store for Jetty
[2019-11-19 12:19:36,905 INFO] Keystore installed successfully.
[2019-11-19 12:19:37,203 INFO] Updating VUM extension with VC
[2019-11-19 12:19:37,433 INFO] Updating CM service info
[2019-11-19 12:19:37,433 INFO] Enter updateCmServiceInfo
[2019-11-19 12:19:37,433 INFO] Client's property file: /usr/lib/vmware-updatemgr/firstboot/updatemgr.properties
[2019-11-19 12:19:37,625 ERROR] CM ReRegisterService failure. Exception is (cis.cm.fault.ComponentManagerFault) {
dynamicType = <unset>,
dynamicProperty = (vmodl.DynamicProperty) [],
msg = '',
faultCause = <unset>,
faultMessage = (vmodl.LocalizableMessage) [],
errorCode = 0,
errorMessage = 'UNKNOWN'
}
[2019-11-19 12:19:37,625 ERROR] Unable to update CM service info
cm.log
2019-11-19T12:19:37.477+01:00 [pool-2-thread-1 [] INFO com.vmware.vim.lookup.client.SiteAffinityServerEndpointProvider (95e80f53-2516-487a-b704-d2760bbd8add)] Site affinity is disabled
2019-11-19T12:19:37.602+01:00 [pool-2-thread-1 [] INFO com.vmware.vim.sso.client.impl.SiteAffinityServiceDiscovery (95e80f53-2516-487a-b704-d2760bbd8add)] Site affinity is disabled
2019-11-19T12:19:37.621+01:00 [pool-2-thread-1 [] ERROR com.vmware.vim.sso.client.impl.SoapBindingImpl (95e80f53-2516-487a-b704-d2760bbd8add)] The SSL certificate of STS service cannot be verified
com.vmware.vim.sso.client.impl.ssl.UntrustedSslCertificateException: The SSL certificate of STS service cannot be verified
at com.vmware.vim.sso.client.impl.ssl.StsSslTrustManager.validateServerIdentityWithThumbprint(StsSslTrustManager.java:227) ~[wstClient.jar:?]
[2019-11-19 12:19:35,876 INFO] Install Key store for Jetty
[2019-11-19 12:19:36,905 INFO] Keystore installed successfully.
[2019-11-19 12:19:37,203 INFO] Updating VUM extension with VC
[2019-11-19 12:19:37,433 INFO] Updating CM service info
[2019-11-19 12:19:37,433 INFO] Enter updateCmServiceInfo
[2019-11-19 12:19:37,433 INFO] Client's property file: /usr/lib/vmware-updatemgr/firstboot/updatemgr.properties
[2019-11-19 12:19:37,625 ERROR] CM ReRegisterService failure. Exception is (cis.cm.fault.ComponentManagerFault) {
dynamicType = <unset>,
dynamicProperty = (vmodl.DynamicProperty) [],
msg = '',
faultCause = <unset>,
faultMessage = (vmodl.LocalizableMessage) [],
errorCode = 0,
errorMessage = 'UNKNOWN'
}
[2019-11-19 12:19:37,625 ERROR] Unable to update CM service info
cm.log
2019-11-19T12:19:37.477+01:00 [pool-2-thread-1 [] INFO com.vmware.vim.lookup.client.SiteAffinityServerEndpointProvider (95e80f53-2516-487a-b704-d2760bbd8add)] Site affinity is disabled
2019-11-19T12:19:37.602+01:00 [pool-2-thread-1 [] INFO com.vmware.vim.sso.client.impl.SiteAffinityServiceDiscovery (95e80f53-2516-487a-b704-d2760bbd8add)] Site affinity is disabled
2019-11-19T12:19:37.621+01:00 [pool-2-thread-1 [] ERROR com.vmware.vim.sso.client.impl.SoapBindingImpl (95e80f53-2516-487a-b704-d2760bbd8add)] The SSL certificate of STS service cannot be verified
com.vmware.vim.sso.client.impl.ssl.UntrustedSslCertificateException: The SSL certificate of STS service cannot be verified
at com.vmware.vim.sso.client.impl.ssl.StsSslTrustManager.validateServerIdentityWithThumbprint(StsSslTrustManager.java:227) ~[wstClient.jar:?]
Environment
VMware vCenter Update Manager 6.5.x
Cause
The update manager service is failing to start since the STS_INTERNAL_SSL_CERT certificate is expired.
Resolution
This issue can be resolve by replacing the STS_INTERNAL_SSL_CERT certificate with the MACHINE_SSL_CERT certificate.
For more information, please refer to KB article to replace the STS_INTERNAL_SSL_CERT certificate: Process to replace the STS_INTERNAL_SSL_CERT with the machine cert from the MACHINE_SSL_CERT
For more information, please refer to KB article to replace the STS_INTERNAL_SSL_CERT certificate: Process to replace the STS_INTERNAL_SSL_CERT with the machine cert from the MACHINE_SSL_CERT
Feedback
Yes
No
Powered by
