I've gotten myself into a bit of a pickle. I let my vCenter server (appliance) certificate expire. When I ran the certificate manager script and gave it the new certificate, it failed. I had an old extension it didn't like. I got a "ERROR certificate-manager 'lstool get' failed: 1". There is a KB that describes it:
In my case, it's an old Emulex extension I played with once and apparently didn't clean up. The solution for that is to remove it at https://vcenter.fqdn/mob.
Unfortunately, before I found that solution, I tried a reboot as it hadn't been restarted in some time. That caused vpxd to not start. Complaining about an expired certificate. So now the /mob directory just gives a 503 Service Unavailable error.
So I'm stuck in a loop. I can't update the certificate until i remove the extension. I can't remove the extension until I replace the certificate.
I'm hoping there's a command line method to remove the extension. But I have been unable to find any information except through the GUI or /mob. Please tell me someone has a solution for this?
I've opened a case on the issue, but we apparently only have basic support on vCenter (another thing to address later), so I'm not expecting a call back until Monday.
- Steve