My Oracle Support Banner

[PCA 2.3.x] pca_upgrader Check Fails on OVM SSL Certificates Pointing to /nfs/shared_storage (Doc ID 2585048.1)

Last updated on APRIL 26, 2021

Applies to:

Private Cloud Appliance - Version 2.3.1 and later
Linux x86-64

Symptoms

Before upgrade to PCA 2.3.4 through pca_upgrader, pre-upgrade check fails on step 3-10 of Doc ID 2442664.1.

The OVM SSL certificates are sharing between mn05 and mn06 on nfs shared storage.

The local SSL certificates path(s) are symbolic links to nfs shared storage.

When running 'ovmkeytool.sh setup' will re-create certificate files on nfs shared storage.

pca_upgrader code will break down HA (between mn05 and mn06) by removing those symbolic links and makes these certificates local.

Then start Oracle VM Manager will get failed because it could not find SSL certifications in /nfs/shared_storage/. 

Example of incorrect paths:

# /u01/app/oracle/ovm-manager-3/ovm_upgrade/bin/ovmkeytool.sh show 2>/dev/null | grep 'Keystore File'
CA Keystore File: /nfs/shared_storage/wls1/security/ovmca.jks
SSL Keystore File: /nfs/shared_storage/wls1/security/ovmssl.jks
SSL Trust Keystore File: /nfs/shared_storage/wls1/security/ovmtrust.jks

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.