How-to fix vRealize Business error “Untrusted certificate chain” after an upgrade to vRA 7.3 and vRB 7.3

After I upgraded vRealize Business and vRealize Automation to version 7.3.0, I discovered that vRB was not working anymore from the vRA portal.

The following error message “ Untrusted certificate chain” gets presented when accessing the vRB sections in vRA.

This article reveals how I managed to solve this unexpected issue.

  1. We can recognize this issue by opening the vRA portal and navigate to the vRB sections.
  2. When the above error appears, we also see that the related vRB services have not been registered on the vRA appliance(s).
  3. A first remediation attempt will be a reboot of the vRB virtual appliance.
  4. If the reboot of the vRB virtual appliance did not solve the issue, you can try the following procedure.
  5. Login to the vRB virtual appliance VAMI interface and go to the Registration section.
  6. Provide the SSO Admin User and Password and click Unregister.
  7. Next, login to the console of the vRB virtual appliance and get the password for the keystore. You can find this password in the following file “/shared/”. Search for the line bio-ssl.keystore.password. You can also use the command cat /shared/ | grep “bio-ssl”.
  8. With the keystore password, we can remove the existing pricing-api certificate. Use the following command to remove this certificate keytool -delete -noprompt -alias pricing-api -keystore /server/conf/ssl.keystore -storepass 7ks5LoxHzf1YYAKykt2pzqSd74uL
  9. Now go back to the vRB virtual appliance VAMI interface and navigate again to the Registration section. Provide the vRA portal name, SSO Default Tenant, SSO Admin User and SSO Admin Password and click Register.
  10. Finally, reboot the vRB virtual appliance and login again to the vRA portal. Navigate again to the vRB sections and validate if the issue has been resolved like it did for me.
  11. Enjoy again using vRB 7.3.0 with vRA 7.3.0.

Leave a Reply

Your email address will not be published. Required fields are marked *