SSL Handshake Error Post Upgrade

If there are any SSL Handshake errors and the discovery fails in the Domain Managers while discovering VMware Aria Operations, VMware Telco Cloud Automation, Cisco ACI, VCD, and vIMS after upgrading the Domain Manager and VMware Telco Cloud Service Assurance core then perform the following steps.

If the SSL handshake error is observed while discovering VMware Aria Operations (Topology and Alerts), VMware Telco Cloud Automation, Samsung (5G Discovery), and VCD then perform the following steps:

Pre-Requisistes:

The VMware Telco Cloud Service Assurance and the Domain Managers should be up and running post upgrade.

1. Navigate to the <BASEDIR>/smarts/conf/util-scripts directory of SAM or ESM Install.
2. Copy the update_kafka_crt.py file located in the util-scripts directory of SAM or ESM Server to the Deployer VM.
3. Log in to the Deployer VM and navigate to the directory to which the update_kafka_crt.py was copied.
4. Execute the following command to update the Kafka-edge certs.

   python3 update_kafka_crt.py -ip <TCSA UI IP> -p <TCSA-UI-Port> -u <TCSA-Admin-Username> -a <TCSA-Admin-Password>

   For example:

   python3 update_kafka_crt.py -ip 10.10.10.1 -p 443 -u admin -a changeme

5. The Kafka-edge certificates will be updated on all the servers whose Kafka settings were configured from Domain settings of VMware Telco Cloud Service Assurance UI.
6. Re-trigger the discovery

If the SSL handshake error is observed while discovering Cisco ACI and vIMS then perform the following steps:

1. The certificates for the Edge Kafka needs to be regenerated manually for the Cisco ACI and vIMS components post upgrade to 2.4.
2. For regenerating the Kafka-Edge certificates, see Enable TLS for Edge Kafka topic. After you generate the certificates, perform the following steps for Cisco ACI and vIMS.
   • For Cisco ACI: Update the newly generated certificate location, SCRAM password, and trust store location in the Domain Manager Device Access Settings and Polling and Thresholds window. For more information, see Update Device Access Setting for Kafka topic.
   • For vIMS: Update the newly generated certificate location, SCRAM password, and trust store location in the clientConnect.conf. For more information, see Configuring Edge Kafka and VMware Telco Cloud Service Assurance Data Collector topic.
3. Re-trigger the discovery