vcenter登录报错HTTP状态500
检查证书状态：
VMware vCenter Server 7.0.3.00300
Type: vCenter Server with an embedded Platform Services Controller
Last login: Tue Mar 26 02:37:20 2024 from 192.168.xxx.xxx
Connected to service
* List APIs: "help api list"
* List Plugins: "help pi list"
* Launch BASH: "shell"
Command> shell
Shell access is granted to root
root@localhost [ ~ ]# for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i; sudo /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --text | egrep "Alias|Not After"; done
检查主机信息：
root@localhost [ ~ ]# /usr/lib/vmware-vmafd/bin/vmafd-cli get-pnid --server-name localhost
192.168.108.100
root@localhost [ ~ ]# hostname -f
localhost
更新MACHINE_SSL_CERT证书
root@localhost [ /storage/log/vmware ]# /usr/lib/vmware-vmca/bin/certificate-manager
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
| |
| *** Welcome to the vSphere 6.8 Certificate Manager *** |
| |
| -- Select Operation -- |
| |
| 1. Replace Machine SSL certificate with Custom Certificate |
| |
| 2. Replace VMCA Root certificate with Custom Signing |
| Certificate and replace all Certificates |
| |
| 3. Replace Machine SSL certificate with VMCA Certificate |
| |
| 4. Regenerate a new VMCA Root Certificate and |
| replace all certificates |
| |
| 5. Replace Solution user certificates with |
| Custom Certificate |
| NOTE: Solution user certs will be deprecated in a future |
| release of vCenter. Refer to release notes for more details.|
| |
| 6. Replace Solution user certificates with VMCA certificates |
| |
| 7. Revert last performed operation by re-publishing old |
| certificates |
| |
| 8. Reset all Certificates |
|_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _|
Note : Use Ctrl-D to exit.
Option[1 to 8]: 3
Please provide valid SSO and VC privileged user credential to perform certificate operations.
Enter username [Administrator@vsphere.local]:administrator@hsmt.vc
Enter password:
第一次输入密码后报错：
Certificate Manager tool do not support vCenter HA systems
处理办法：mkdir /var/tmp/vmware后重新执行命令即可
certool.cfg file exists, Do you wish to reconfigure : Option[Y/N] ? : Y
Press Enter key to skip optional parameters or use Previous value.
Enter proper value for 'Country' [Previous value : US] :
Enter proper value for 'Name' [Previous value : CA] :
Enter proper value for 'Organization' [Previous value : VMware] :
Enter proper value for 'OrgUnit' [Previous value : VMware Engineering] :
Enter proper value for 'State' [Previous value : California] :
Enter proper value for 'Locality' [Previous value : Palo Alto] :
Enter proper value for 'IPAddress' (Provide comma separated values for multiple IP addresses) [optional] : 192.168.108.100
Enter proper value for 'Email' [Previous value : email@acme.com] : administrator@hsmt.vc
Enter proper value for 'Hostname' (Provide comma separated values for multiple Hostname entries) [Enter valid Fully Qualified Domain Name(FQDN), For Example : example.domain.com] : localhost
Enter proper value for VMCA 'Name' :
VMCA Name should not be empty, please enter valid VMCA Name.
Enter proper value for VMCA 'Name' :localhost
You are going to regenerate Machine SSL cert using VMCA
Continue operation : Option[Y/N] ? : Y
Get site nameompleted [Replacing Machine SSL Cert...]
default-first-site
Lookup all services
Get service default-first-site:45f1d9d8-23f2-4209-a1e6-a97b2dbe320c
Don't update service default-first-site:45f1d9d8-23f2-4209-a1e6-a97b2dbe320c
Get service default-first-site:f7f95b8c-e427-4550-8631-a2f3b17a73a5
Don't update service default-first-site:f7f95b8c-e427-4550-8631-a2f3b17a73a5
Get service default-first-site:af636cfa-17e2-4da8-b498-a7b5c9cdcf29
Don't update service default-first-site:af636cfa-17e2-4da8-b498-a7b5c9cdcf29
Get service 8f44d910-d5da-4d41-ac1c-e9e969a5ed4a
Don't update service 8f44d910-d5da-4d41-ac1c-e9e969a5ed4a
Get service d889b887-b923-4e78-a881-34c08dfc2d42
Don't update service d889b887-b923-4e78-a881-34c08dfc2d42
Get service 5a59ed7c-a264-4a11-951b-9e8d75a304b1
Don't update service 5a59ed7c-a264-4a11-951b-9e8d75a304b1
Get service 45e94a3a-5291-4601-a25e-8d94b4c3fdef
Don't update service 45e94a3a-5291-4601-a25e-8d94b4c3fdef
Get service 17e86475-f780-481d-9923-130d877703bd
Don't update service 17e86475-f780-481d-9923-130d877703bd
Get service fa05d894-9991-4f5a-a33a-64148d2f83e5
Don't update service fa05d894-9991-4f5a-a33a-64148d2f83e5
Get service 859540a9-ea20-4c26-9f4f-510f3a220e56
Don't update service 859540a9-ea20-4c26-9f4f-510f3a220e56
Get service 152fd1ce-eac2-47d6-aa6f-f8785abaede1_authz
Don't update service 152fd1ce-eac2-47d6-aa6f-f8785abaede1_authz
Get service 23f28be7-db7e-4bcd-b78b-348887a3524a
Don't update service 23f28be7-db7e-4bcd-b78b-348887a3524a
Get service 1ec6dff9-d558-4e08-94d8-a6f02dd9ef25
Don't update service 1ec6dff9-d558-4e08-94d8-a6f02dd9ef25
Get service de47c6e5-e517-4689-9ab0-fec5c1988cff
Don't update service de47c6e5-e517-4689-9ab0-fec5c1988cff
Get service 65597727-242c-4798-b5b0-4a30486caff5
Don't update service 65597727-242c-4798-b5b0-4a30486caff5
Get service c9a89126-b382-4e5e-9578-7bfde8aaa5c8
Don't update service c9a89126-b382-4e5e-9578-7bfde8aaa5c8
Get service 00b0e3fc-fba9-4b51-bdcc-859020a25dd8
Don't update service 00b0e3fc-fba9-4b51-bdcc-859020a25dd8
Get service 1af9ca4f-4951-4d29-ae31-b31b8a75ef10
Don't update service 1af9ca4f-4951-4d29-ae31-b31b8a75ef10
Get service 0aaea811-4385-43c9-9baf-aa03033bdf41
Don't update service 0aaea811-4385-43c9-9baf-aa03033bdf41
Get service a08690fc-cd08-467e-876c-9d762e345347_com.vmware.vsphere.client
Don't update service a08690fc-cd08-467e-876c-9d762e345347_com.vmware.vsphere.client
Get service 47e68001-b7de-4d25-b294-1be7455cdb34
Don't update service 47e68001-b7de-4d25-b294-1be7455cdb34
Get service fe32cad6-464a-4bba-80a1-bf91d31fe98a
Don't update service fe32cad6-464a-4bba-80a1-bf91d31fe98a
Get service e382c585-059a-4d32-bef0-5f4d9bfd0321
Don't update service e382c585-059a-4d32-bef0-5f4d9bfd0321
Get service 210e4799-1669-4aab-ab64-d689eea2891b
Don't update service 210e4799-1669-4aab-ab64-d689eea2891b
Get service 89a801b7-2f5a-4c10-84a5-91cd59d1e9a2
Don't update service 89a801b7-2f5a-4c10-84a5-91cd59d1e9a2
Get service 794d032d-44ce-495a-b413-8ce6d1f163f6
Don't update service 794d032d-44ce-495a-b413-8ce6d1f163f6
Get service 59e876f6-2bd6-410b-8845-2954258831a0
Don't update service 59e876f6-2bd6-410b-8845-2954258831a0
Get service 34e3f7ce-a767-4de7-8973-2286bddc1d0a
Don't update service 34e3f7ce-a767-4de7-8973-2286bddc1d0a
Get service 152fd1ce-eac2-47d6-aa6f-f8785abaede1
Don't update service 152fd1ce-eac2-47d6-aa6f-f8785abaede1
Get service cf6a2505-dda4-44e1-8714-f9fe31ff6bbb
Don't update service cf6a2505-dda4-44e1-8714-f9fe31ff6bbb
Get service df671f26-7d67-4b9d-8588-639ce94129dd
Don't update service df671f26-7d67-4b9d-8588-639ce94129dd
Get service ffb38cd3-2b83-46cd-af45-54927efba2ec
Don't update service ffb38cd3-2b83-46cd-af45-54927efba2ec
Get service eb5233db-000a-4ddb-a5e3-1e39011a0ac5
Don't update service eb5233db-000a-4ddb-a5e3-1e39011a0ac5
Get service c412dd1b-2422-4398-b1c3-e82083ec6d76
Don't update service c412dd1b-2422-4398-b1c3-e82083ec6d76
Get service f6b29985-a1bc-43da-a876-6e46694454e7
Don't update service f6b29985-a1bc-43da-a876-6e46694454e7
Get service 705b4376-4a37-4fe1-b650-d0113aa55b59
Don't update service 705b4376-4a37-4fe1-b650-d0113aa55b59
Get service c2fe6f74-91dd-488b-bfc3-2b137a80c785
Don't update service c2fe6f74-91dd-488b-bfc3-2b137a80c785
Get service 7a50e374-74c4-4b3e-a4ec-6e712d006433
Don't update service 7a50e374-74c4-4b3e-a4ec-6e712d006433
Get service a4df7753-cc82-4cf9-a0ce-0c517c66e21a
Don't update service a4df7753-cc82-4cf9-a0ce-0c517c66e21a
Get service 22bc0f76-8b28-452c-916b-b2c63f941635
Don't update service 22bc0f76-8b28-452c-916b-b2c63f941635
Get service 152fd1ce-eac2-47d6-aa6f-f8785abaede1_kv
Don't update service 152fd1ce-eac2-47d6-aa6f-f8785abaede1_kv
Get service f8450e2f-5586-4951-9384-87b182a6114d
Don't update service f8450e2f-5586-4951-9384-87b182a6114d
Get service af0cb3cd-a6f7-48dc-b8f7-07cb0ec1bf7c
Don't update service af0cb3cd-a6f7-48dc-b8f7-07cb0ec1bf7c
Get service 0bb9306d-a6cd-44c7-96a9-160831245ee8
Don't update service 0bb9306d-a6cd-44c7-96a9-160831245ee8
Get service a08690fc-cd08-467e-876c-9d762e345347
Don't update service a08690fc-cd08-467e-876c-9d762e345347
Updated 0 service(s)
Status : 100% Completed [All tasks completed successfully]
root@localhost [ /storage/log/vmware ]# for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i; sudo /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --text | egrep "Alias|Not After"; done
另外发现磁盘空间/storage/archive目录占用超过95%，立即处理：
root@localhost [ / ]# cd /storage/archive/vpostgres
root@localhost [ /storage/archive/vpostgres ]# find * -mtime +30 -exec rm {} \;
root@localhost [ /storage/archive/vpostgres ]# df -hT
Filesystem Type Size Used Avail Use% Mounted on
devtmpfs devtmpfs 9.3G 0 9.3G 0% /dev
tmpfs tmpfs 9.4G 884K 9.4G 1% /dev/shm
tmpfs tmpfs 9.4G 1.2M 9.4G 1% /run
tmpfs tmpfs 9.4G 0 9.4G 0% /sys/fs/cgroup
/dev/mapper/vg_root_0-lv_root_0 ext4 47G 11G 35G 24% /
tmpfs tmpfs 9.4G 2.9M 9.4G 1% /tmp
/dev/sda3 ext4 488M 40M 413M 9% /boot
/dev/mapper/imagebuilder_vg-imagebuilder ext4 9.8G 37M 9.3G 1% /storage/imagebuilder
/dev/mapper/vg_lvm_snapshot-lv_lvm_snapshot ext4 196G 61M 186G 1% /storage/lvm_snapshot
/dev/mapper/autodeploy_vg-autodeploy ext4 9.8G 37M 9.3G 1% /storage/autodeploy
/dev/sda2 vfat 10M 2.2M 7.9M 22% /boot/efi
/dev/mapper/netdump_vg-netdump ext4 985M 2.5M 915M 1% /storage/netdump
/dev/mapper/vtsdblog_vg-vtsdblog ext4 15G 57M 14G 1% /storage/vtsdblog
/dev/mapper/updatemgr_vg-updatemgr ext4 98G 368M 93G 1% /storage/updatemgr
/dev/mapper/lifecycle_vg-lifecycle ext4 98G 3.5G 90G 4% /storage/lifecycle
/dev/mapper/dblog_vg-dblog ext4 15G 89M 14G 1% /storage/dblog
/dev/mapper/core_vg-core ext4 49G 53M 47G 1% /storage/core
/dev/mapper/vtsdb_vg-vtsdb ext4 25G 76M 24G 1% /storage/vtsdb
/dev/mapper/archive_vg-archive ext4 49G 2.8G 44G 6% /storage/archive
/dev/mapper/db_vg-db ext4 9.8G 2.5G 6.9G 26% /storage/db
/dev/mapper/seat_vg-seat ext4 25G 305M 23G 2% /storage/seat
/dev/mapper/log_vg-log ext4 9.8G 4.7G 4.7G 50% /storage/log
最后修改时间：2024-03-26 11:03:03
「喜欢这篇文章，您的关注和赞赏是给作者最好的鼓励」
关注作者
【版权声明】本文为墨天轮用户原创内容，转载时必须标注文章的来源（墨天轮），文章链接，文章作者等基本信息，否则作者和墨天轮有权追究责任。如果您发现墨天轮中有涉嫌抄袭或者侵权的内容，欢迎发送邮件至：contact@modb.pro进行举报，并提供相关证据，一经查实，墨天轮将立刻删除相关内容。
