

Upon restart, the Web client was then throwing an Error 400. The script only needs to be run once per SSO Domain. Restart the appliance and confirm functionality.Ħ. Make the script executable by running “ chmod +x fixsts.sh”ĥ. sh script to the /tmp dir of the appliance running the PSC role.ģ. Create a snapshots of all vCSAs (and external PSCs, if applicable).Ģ. VMware has created a script to resolve this issue ( fixsts.sh).

Sadly, there is no warning or easy way to determine when the STS Cert will expire using the HTML 5 client. If your vCSA was deployed using version 6.5 U2 or later, the STS cert may only be good for 2 years. It tuns out The Security Token Service (STS) Certificate had expired. T21:10:50.484Z Service vpxd-svcs state STOPPEDĮrror executing start on service vpxd-svcs.Upon running “ service-control –status” in the vCSA, it was determined that the vapi-endpoint service was in a stopped state. vmon_profile=None, svc_names=, include_coreossvcs=False, include_leafossvcs=False When using service-control to start just the vpxd-svcs service by itself, it returns the following error: Error Failed to start vmon services.vmon-cli RC=1, stderr=Failed to start vpxd-svcs, vapi-endpoint services.

When I try to start all services now, it returns the following after ~5 minutes:
