topic Re: Upgrade certificate to CA in VMware Solutions Discussions

Upgrade certificate to CA

FilipS — Tue, 01 Jul 2025 08:36:35 GMT

I'm trying to upgrade the self signed certificate of ONTAP Tools for vSphere version 10.4 to one signed by our internal MS CA.
When doing so, I receive the error The payload for POST request is invalid.
I already found KB: Unable to upgrade from certificate to CA in ONTAP Tools for VMware vSphere v10.3 - NetApp Knowledge Base

This however does not help.

Re: Upgrade certificate to CA

FilipS — Tue, 01 Jul 2025 08:57:31 GMT

Here is a screenshot.

Re: Upgrade certificate to CA

ChanceBingen — Tue, 01 Jul 2025 12:59:39 GMT

Interesting. I wonder if there is some kind of bug with the way the GUI takes the certificate contents and malforms the REST API.

Can you try using the REST API instead of the GUI?
https://<OTV.IP>:8443/#/Commons/virtualization__commonsAddCertificate

Re: Upgrade certificate to CA

ChanceBingen — Tue, 01 Jul 2025 13:37:06 GMT

If you do use the REST APIs, you will need to authenticate and get a token here:

https://<IP>:8443/#/Auth/virtualization__validateAdminLogin

Re: Upgrade certificate to CA

FilipS — Tue, 01 Jul 2025 14:10:50 GMT

Hmmm. I'm getting the following response:

{  "error": {    "code": "error_converting_input_to_certificate_request",    "message": "Error converting input to Certificate request",    "target": "Certificates"
  }
}

Re: Upgrade certificate to CA

ChanceBingen — Tue, 01 Jul 2025 14:25:26 GMT

I see, can you post the curl -X POST command generated by swagger? Alter the username/password/certificate for security.

Re: Upgrade certificate to CA

FilipS — Tue, 01 Jul 2025 15:01:27 GMT

Here you go.

Authentication:
curl -X POST "https://x.x.x.x:8443/virtualization/api/v1/auth/login" -H "accept: application/json" -H "Content-Type: application/json" -d "{\"username\":\"Administrator\",\"password\":\"mypassword\"}"

Add certificate:

curl -X POST "https://x.x.x.x:8443/virtualization/api/v1/commons/certificates" -H "accept: application/json" -H "Content-Type: application/json" -d "{ \"cert\": \"mycert...\"}"

Re: Upgrade certificate to CA

ChanceBingen — Mon, 14 Jul 2025 20:09:01 GMT

Hi, @FilipS

I just got back into town after a bit of travel. Eyeballing your API calls, and comparing to my lab, it looks like you need to add the -H "x-auth: [JWT token]" with your JWT token from the output of your authentication. Like this:

curl -X POST "https://x.x.x.x:8443/virtualization/api/v1/commons/certificates" -H  "accept: application/json" -H  "x-auth: JWT_Token" -H  "Content-Type: application/json" -d "{\"cert\":\"string\"}"