Troubleshooting and Limitations – OpenStack Discovery

This section describes troubleshooting and limitations for the OpenStack discovery.

Problem: The HTTPS certificate of the OpenStack Identity API access endpoint is invalid or expired.

Solution: Download the certificate and import the certificate into the Data Flow Probe Trusted Store. To do so,

1. Download the HTTPS certificate of the OpenStack Identity API access endpoint. Perform the following steps:

   1. Open the Microsoft Internet Explorer and go to the address of the OpenStack Identity API access endpoint.

   2. Click the Lock button on the Address bar, and then click View certificates.
   3. In the Certificate dialog box, click the Details tab, and then click Copy to File....

   4. In the Certificate Export Wizard dialog box, click Next.

      • Select the format DER encoded binary X.509 (.CER).
      • Type a certificate file name, for example, snow_host.cert, and then save it to a temporary location.
   5. Click Finish. You can see the The export was successful message.
2. Locate the JRE security folder. By default it is located at <DataFlowProbe installation folder>\bin\jre\lib\security\.
3. Back up the cacerts file by copying it to another folder.

4. Import the previously created certificate file snow_host.cert into the Data Flow Probe Trusted Store.

   Open a Command Prompt window and run the following commands on the local Data Flow Probe:

   cd <DataFlowProbe installation folder>\bin\jre\bin
   keytool.exe -import -storepass <truststore pass> -keystore <DataFlowProbe installation folder>\bin\jre\lib\security\
   cacerts -trustcacerts -file <the path of the certificate file snow_host.cert>

5. In the Command Prompt window, when the message Trust this certificate? appears, enter yes.

6. Restart the Data Flow Probe service.