vcsa7 页面出现“no healthy upstream”处理过程

一、昨天服务器出现“no healthy upstream”错误无法登录，搜索网络给出一下的思路：

对于“no healthy upstream”的错误提示，可能的原因有以下几种。

                  （1）vCenter Server部分服务没有运行，或者运行出现错误。

                  （2）vCenter Server所设置的DNS服务器出现错误。

                  （3）vCenter Server本地hosts文件配置错误。

二、登录IP：5480，发现多个服务未能成功启动，手动启动出现未知原因崩溃现象。

2.1  使用“”service-control --start --all“”，出现一下错误：

“”Service-control failed. Error: Failed to start services in profile ALL. RC=1, stderr=Failed to start sca, vapi-endpoint, vpxd-svcs, sts services. Error: Operation timed out“”

2.2查看/var/log/vmware/sca.log.发现里面出现“com.vmware.vim.vmomi.client.exception.SslException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is not trusted and

thumbprint  verification is not configured”这样的错误。

2.3,百度搜索以上的错误，如下图，使用第一条结果未解决问题；

第一条链接（https://kb.vmware.com/s/article/2084514）

2.4改用bing.com,发现一下的链接：

有人建议：2.4.1Regenerate a New VMCA Root Certificate and Replace All Certificates

linux服务器 执行：   /usr/lib/vmware-vmca/bin/certificate-manager

Log in to the vCenter Server and start the vSphere Certificate Manager.

• /usr/lib/vmware-vmca/bin/certificate-manager
• Select option 4, Regenerate a new VMCA Root Certificate and replace all certificates.
• Respond to the prompts.
• Certificate Manager generates a new VMCA root certificate based on your input and replaces all certificates on the system where you are running Certificate Manager. The replacement process is complete after Certificate Manager has restarted the services.
• To replace the machine SSL certificate, run vSphere Certificate Manager with option 3, Replace Machine SSL certificate with VMCA Certificate.
• To replace the solution user certificates, run Certificate Manager with option 6, Replace Solution user certificates with VMCA certificates.

2.4.2Regenerate Self-Signed Certificate in vSphere 6.5 - VMWare Insight --> Try this first

执行完2.4.1的/usr/lib/vmware-vmca/bin/certificate-manager操作以后，vcsa重启成功，问题解决。