VCSA无法登录，503 Server Unavailable

1. Vcsa 6.7 登录界面无法显示，登录失败。

2.故障原因：

<1> 由于vcenter平台的license过期了导致；<2>由于vcenter系统目录/storage/archive 日志存放目录已使用100%导致vcenter服务宕机导致。

3.处理步骤：

重新更新证书

3.1查看/var/log/目录下面的日志：

vi /var/log/vmware/vpxd-svcs/vpxd-svcs.log ，看到类似的报错。

com.vmware.vim.sso.client.impl.SecurityTokenServiceImpl$RequestResponseProcessor opId=] Server rejected the provided time range. Cause:ns0:InvalidTimeRange: The token authority rejected an issue request for TimePeriod [startTime=Thu Oct 02 09:22:13 EST 2022, endTime=Fri Oct 03 09:22:13 EST 2022] :: Signing certificate is not valid at Thu Jan 02 09:22:13 EST 2020, cert validity: TimePeriod [startTime=Wed Jan 06 20:44:39 EST 2010, endTime=Wed Jan 01 20:54:23 EST 2020]

Note: The endTime should be a date in the past if the certificate is expired.

These issue occurs when the Security Token Service (STS) certificate has expired. This causes internal services and solution users to not be able to acquire valid tokens and as a result fails to function as expected.

3.2 查询证书状态

使用shell登录vcenter ，运行命令：

for i in $(/usr/lib/vmware-vmafd/bin/vecs-cli store list); do echo STORE $i; sudo /usr/lib/vmware-vmafd/bin/vecs-cli entry list --store $i --text | egrep "Alias|Not After"; done

查看vcenter证书的状态。

证书确实已过期。

3.3 配置，更新证书

使用命令