Search the VMware Knowledge Base (KB)
View by Article ID

Pairing vRealize Operations Manager 6.x with a VMware vSphere vCenter that has a weak certificate fails with the error: Certificates does not conform to algorithm constraints (2138644)

  • 1 Ratings

Symptoms

  • When pairing a VMware vCenter Server adapter with VMware vRealize Operations manager it fails with the error:
      Certificates does not conform to algorithm constraints.
  • In the /storage/vcops/log/collector.log file, you see entries similar to:

    ERROR [Task Processor worker thread 3]  com.integrien.alive.common.adapter3.AdapterBase.onCheckCertificate - Error trying to make connection javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints

Cause

This issue occurs when VMware vCenter Server certificate has an RSA key size lower than 1028.

Resolution

This is an expected behavior in VMware vRealize Operations Manager.

To work around this issue, the RSA key size requirement needs to be lowered or disabled:

  1. Log in to the Master node as root through console or a SSH session.
  2. Open $VMWARE_JAVA_HOME/lib/security/java.security file using a text editor.
  3. Change this line to reduce the key restriction, or comment out the entire line to disable the restrictions:

    jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024

    For example:
    Reducing the key size: jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 512
    Removing restraints: #jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024

  4. Save and close the file.
  5. Repeat steps 1-3 on each node in the cluster.
  6. Attempt to pair your vCenter Server adapter.

    Note: It may be necessary to wait for a few minutes before trying the pairing again, or restart the collector service on each node by running this command:

    service vmware-vcops restart collector

Update History

27/04/2016 - KB Published externally

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 1 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 1 Ratings
Actions
KB: