[PCA 2.3.x] pca_upgrader Check Fails on OVM SSL Certificates Pointing to /nfs/shared_storage
(Doc ID 2585048.1)
Last updated on APRIL 26, 2021
Applies to:Private Cloud Appliance - Version 2.3.1 and later
Before upgrade to PCA 2.3.4 through pca_upgrader, pre-upgrade check fails on step 3-10 of Doc ID 2442664.1.
The OVM SSL certificates are sharing between mn05 and mn06 on nfs shared storage.
The local SSL certificates path(s) are symbolic links to nfs shared storage.
When running 'ovmkeytool.sh setup' will re-create certificate files on nfs shared storage.
pca_upgrader code will break down HA (between mn05 and mn06) by removing those symbolic links and makes these certificates local.
Then start Oracle VM Manager will get failed because it could not find SSL certifications in /nfs/shared_storage/.
Example of incorrect paths:
# /u01/app/oracle/ovm-manager-3/ovm_upgrade/bin/ovmkeytool.sh show 2>/dev/null | grep 'Keystore File'
CA Keystore File: /nfs/shared_storage/wls1/security/ovmca.jks
SSL Keystore File: /nfs/shared_storage/wls1/security/ovmssl.jks
SSL Trust Keystore File: /nfs/shared_storage/wls1/security/ovmtrust.jks
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document