Month: January 2023

You can’t put your host in maintenance due to this error “Failed to enter namespaces maintenance mode due to Error com.vmware.vapi errors.unauthenticated”

It’s time to check if you have a certificate expired, login to VCSA over ssh and execute this command:
for store in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list | grep -v TRUSTED_ROOT_CRLS); do echo “[*] Store :” $store; /usr/lib/vmware-vmafd/bin/vecs-cli entry list –store $store –text | grep -ie “Alias” -ie “Not After”;done;

The WCP certificate are expired

[*] Store : wcp
Alias : wcp
Not After : Jan 10 11:48:31 2023 GMT

To renew the certificate execute this command /usr/lib/vmware-vmca/bin/certificate-manager with option 6 “Replace Solution user certificates with VMCA certificates”

1.Log in to the vSphere client and navigate to the cluster on which you want to disable vCLS.
2.Copy the cluster domain ID from the URL of the browser. It should be similar to domain-c(number).
The URL will be something like this:

https://<fqdn-of-vCenter-server>/ui/app/cluster;nav=h/urn:vmomi:ClusterComputeResource:domain-c3607:1A5CDE27-53A4-435D-88B7-1A072F54A13C/summary

Copy the domainc##### part

3. go to vcenter –} advanced settings –} edit settings
4. Add a new entry, config.vcls.clusters.domain-c(###number).enabled. Use the domain ID copied in Step 2.
5. Set the Value to True
6. Click Save.