Appvolumes self-signed certification failed upon installing AppVolumes manager on Windows 2019-2022 Server

[Hatem Shahudh]

App-volumes self-signed certification failed upon installing App Volumes manager on Windows 2019-2022 Serve:

Error message:

"Error generating self signed certificate"

"See log/generate_cert.log for details"

Running as MYUSER.MYDOMAIN on APPVOLSERVER
#### Create log folders
#### Generating nginx server ssl certificate
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/aspector-0.13.1/lib/aspector/base.rb:244: warning: Passing safe_level with the 2nd argument of ERB.new is deprecated. Do not use it, and specify other arguments as keyword arguments.
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/aspector-0.13.1/lib/aspector/base.rb:244: warning: Passing trim_mode with the 3rd argument of ERB.new is deprecated. Use keyword argument like ERB.new(str, trim_mode: ...) instead.
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:50: warning: Socket.gethostbyname is deprecated; use Addrinfo.getaddrinfo instead.
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:50: warning: Socket.gethostbyname is deprecated; use Addrinfo.getaddrinfo instead.
I, [2024-08-14T16:33:51.668368 #1796] INFO -- : Process ID "1796" running "C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/bin/rake cert:generate_server_cert" ended after 14 seconds
I, [2024-08-14T16:33:51.309260 #1796] INFO -- : Generating certificate for HostName: APPVOLSERVER.MYDOMAIN.LOCAL
I, [2024-08-14T16:33:51.309403 #1796] INFO -- : Issued to: /C=US/ST=California/L=Palo Alto/O=VMware/OU=AppVolumes/CN=APPVOLSERVER.MYDOMAIN.LOCAL
E, [2024-08-14T16:33:51.583145 #1796] ERROR -- : Failed to execute command. exit_code: 2, Error: The system cannot find the file specified.
Key file is created in CertificateGenerator: <certpath: C:/Program Files (x86)/CloudVolumes/Manager/nginx/conf cert_file: C:/Program Files (x86)/CloudVolumes/Manager/nginx/conf/appvol_self_vmware.com.key>
I, [2024-08-14T16:33:51.585288 #1796] INFO -- : Generating certificate for HostName: APPVOLSERVER.MYDOMAIN.LOCAL
I, [2024-08-14T16:33:51.585349 #1796] INFO -- : Issued to: /C=US/ST=California/L=Palo Alto/O=VMware/OU=AppVolumes/CN=APPVOLSERVER.MYDOMAIN.LOCAL
Certificate is created in CertificateGenerator: <certpath: C:/Program Files (x86)/CloudVolumes/Manager/nginx/conf cert_file: C:/Program Files (x86)/CloudVolumes/Manager/nginx/conf/appvol_self_vmware.com.crt>
#### Generating powershell ssl certificate
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/aspector-0.13.1/lib/aspector/base.rb:244: warning: Passing safe_level with the 2nd argument of ERB.new is deprecated. Do not use it, and specify other arguments as keyword arguments.
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/aspector-0.13.1/lib/aspector/base.rb:244: warning: Passing trim_mode with the 3rd argument of ERB.new is deprecated. Use keyword argument like ERB.new(str, trim_mode: ...) instead.
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:50: warning: Socket.gethostbyname is deprecated; use Addrinfo.getaddrinfo instead.
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:50: warning: Socket.gethostbyname is deprecated; use Addrinfo.getaddrinfo instead.
I, [2024-08-14T16:34:01.649921 #8408] INFO -- : Process ID "8408" running "C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/bin/rake cert:generate_powershell_cert" ended after 6 seconds
I, [2024-08-14T16:34:01.406670 #8408] INFO -- : Generating certificate for HostName: APPVOLSERVER.MYDOMAIN.LOCAL
I, [2024-08-14T16:34:01.406960 #8408] INFO -- : Issued to: /C=US/ST=California/L=Palo Alto/O=VMware/OU=AppVolumes/CN=APPVOLSERVER.MYDOMAIN.LOCAL
E, [2024-08-14T16:34:01.550833 #8408] ERROR -- : Failed to execute command. exit_code: 2, Error: The system cannot find the file specified.
,
Key file is created in CertificateGenerator: <certpath: C:/Program Files (x86)/CloudVolumes/Manager/config cert_file: C:/Program Files (x86)/CloudVolumes/Manager/config/CVPowershell.key>
I, [2024-08-14T16:34:01.554119 #8408] INFO -- : Generating certificate for HostName: APPVOLSERVER.MYDOMAIN.LOCAL
I, [2024-08-14T16:34:01.554228 #8408] INFO -- : Issued to: /C=US/ST=California/L=Palo Alto/O=VMware/OU=AppVolumes/CN=APPVOLSERVER.MYDOMAIN.LOCAL
Certificate is created in CertificateGenerator: <certpath: C:/Program Files (x86)/CloudVolumes/Manager/config cert_file: C:/Program Files (x86)/CloudVolumes/Manager/config/CVPowershell.pfx>
Running as MYUSER.MYDOMAIN on APPVOLSERVER
#### Create log folders
#### Generating nginx server ssl certificate
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/aspector-0.13.1/lib/aspector/base.rb:244: warning: Passing safe_level with the 2nd argument of ERB.new is deprecated. Do not use it, and specify other arguments as keyword arguments.
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/aspector-0.13.1/lib/aspector/base.rb:244: warning: Passing trim_mode with the 3rd argument of ERB.new is deprecated. Use keyword argument like ERB.new(str, trim_mode: ...) instead.
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:50: warning: Socket.gethostbyname is deprecated; use Addrinfo.getaddrinfo instead.
rake aborted!
Errno::EACCES: Permission denied @ rb_sysopen - C:/Program Files (x86)/CloudVolumes/Manager/nginx/conf/appvol_self_vmware.com.key (Errno::EACCES)
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:73:in `initialize'
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:73:in `open'
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:73:in `save_certificate'
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:38:in `generate'
C:/Program Files (x86)/CloudVolumes/Manager/lib/tasks/cert.rake:31:in `block (2 levels) in <top (required)>'
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/rake-13.1.0/exe/rake:27:in `<top (required)>'
Tasks: TOP => cert:generate_server_cert
(See full trace by running task with --trace)
I, [2024-08-14T16:52:08.857855 #7612] INFO -- : Process ID "7612" running "C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/bin/rake cert:generate_server_cert" ended after 13 seconds
I, [2024-08-14T16:52:08.747221 #7612] INFO -- : Generating certificate for HostName: APPVOLSERVER.MYDOMAIN.LOCAL
I, [2024-08-14T16:52:08.747373 #7612] INFO -- : Issued to: /C=US/ST=California/L=Palo Alto/O=VMware/OU=AppVolumes/CN=APPVOLSERVER.MYDOMAIN.LOCAL
#### Generating powershell ssl certificate
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/aspector-0.13.1/lib/aspector/base.rb:244: warning: Passing safe_level with the 2nd argument of ERB.new is deprecated. Do not use it, and specify other arguments as keyword arguments.
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/aspector-0.13.1/lib/aspector/base.rb:244: warning: Passing trim_mode with the 3rd argument of ERB.new is deprecated. Use keyword argument like ERB.new(str, trim_mode: ...) instead.
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:50: warning: Socket.gethostbyname is deprecated; use Addrinfo.getaddrinfo instead.
rake aborted!
Errno::EACCES: Permission denied @ rb_sysopen - C:/Program Files (x86)/CloudVolumes/Manager/config/CVPowershell.key (Errno::EACCES)
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:73:in `initialize'
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:73:in `open'
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:73:in `save_certificate'
C:/Program Files (x86)/CloudVolumes/Manager/lib/certificate_generator.rb:38:in `generate'
C:/Program Files (x86)/CloudVolumes/Manager/lib/tasks/cert.rake:54:in `block (2 levels) in <top (required)>'
C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/gems/rake-13.1.0/exe/rake:27:in `<top (required)>'
Tasks: TOP => cert:generate_powershell_cert
(See full trace by running task with --trace)
I, [2024-08-14T16:52:18.464642 #1244] INFO -- : Process ID "1244" running "C:/Program Files (x86)/CloudVolumes/Manager/vendor/bundle/ruby/3.2.0/bin/rake cert:generate_powershell_cert" ended after 6 seconds
I, [2024-08-14T16:52:18.230486 #1244] INFO -- : Generating certificate for HostName: APPVOLSERVER.MYDOMAIN.LOCAL
I, [2024-08-14T16:52:18.230599 #1244] INFO -- : Issued to: /C=US/ST=California/L=Palo Alto/O=VMware/OU=AppVolumes/CN=APPVOLSERVER.MYDOMAIN.LOCAL

 

Possible Cause:

STIG GPO's or other Security GPO's(Group Policy Objects). 

Resolution:

Fix action for this is to actually create(organizational Unit) in Active Directory that blocks Group Policy Object (GPO's) and then move that server where you are trying to install App Volumes manager on to that OU. This step will allow you to do the installation without any issues and then you can move it back to its appropriate OU.