Cannot start ZCentral Manager service after renewing certificate

[MRoth]

Hello,
after renewing our self-singed certificate for the zcentral manager it's not possible to start the manager service. While the renewal was running I got the following error in the logfile (I removed the thumbprints and servername):

2022-05-25 13:11:16,528 [1] INFO BaseCommand - Successfully logged in as Administrator.
2022-05-25 13:11:16,568 [1] INFO BaseCommand - Certificate renewal notification task has started.
2022-05-25 13:11:31,791 [1] INFO BaseCommand - Certificate renewal notification task has started.
2022-05-25 13:11:37,910 [1] INFO BaseCommand - Certificate renewal notification task has finished.
2022-05-25 13:11:56,695 [1] INFO CertificateCommand - Process started at 25.05.2022 13:11:56
2022-05-25 13:11:56,695 [1] INFO CertificateCommand - Certificate to be removed: Subject: CN=XXXX. Issuer: CN=HP ZCentral Connect CA. Thumbprint: XXXX. Effective Date: 02.07.2021 02:00:00. Expiration Date: 02.07.2022 09:09:52. Store: My
2022-05-25 13:11:56,695 [1] INFO CertificateCommand - New CA: Subject: CN=HP ZCentral Connect CA. Issuer: CN=HP ZCentral Connect CA. Thumbprint: XXXX. Effective Date: 02.07.2021 02:00:00. Expiration Date: 02.07.2031 09:09:49. Store: Root
2022-05-25 13:11:56,695 [1] INFO CertificateCommand - New certificate: Subject: CN=XXXX. Issuer: CN=HP ZCentral Connect CA. Thumbprint: XXXX. Effective Date: 25.05.2022 02:00:00. Expiration Date: 25.05.2023 13:11:03. Store: My
2022-05-25 13:11:57,028 [1] INFO BaseCommand - Manager service was stopped.
2022-05-25 13:11:57,037 [1] INFO BaseCommand - Successfully added certificate with thumbprint XXXX to the My store.
2022-05-25 13:11:57,039 [1] INFO BaseCommand - Updated "CertificateThumbprint" on file C:\ProgramData\HP\ZCentralConnectManager\settings.json.
2022-05-25 13:11:57,041 [1] INFO BaseCommand - Updated certificate thumbprint in windows registry (HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\HP\ZCentralConnectManager).
2022-05-25 13:11:57,042 [1] INFO BaseCommand - Updated certificate thumbprint in windows registry (HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\HP\ZCentralConnectManager).
2022-05-25 13:11:57,074 [1] INFO BaseCommand - Removed certificate with thumbprint XXXX from the My store.
2022-05-25 13:11:57,635 [1] INFO BaseCommand - Bound certificate with XXXX to port 8443.
2022-05-25 13:13:58,486 [1] ERROR BaseCommand - Failed to execute operation. Error: Der Vorgang wurde nicht abgeschlossen, da der Timeout abgelaufen ist.

I tried to renew the certificate again, but it doesn't work since the service is not running.
Does anyone know what's going on?

[KellyRGS]

Can you tell me what version of Connect Manager you are using?  I would like to collect a full manager.log file, and have made a request to have PM enabled for you so I can collect those.  As soon as I see this is done, will reach out in a PM.

Kelly

[KellyRGS]

Here is something to try to see if this resolves your issue.  You can retry the certificate renewal adding the --offline option.  This will allow you to change the certificate even with the Manager offline.  You may have to re-register some agents after doing this.

Kelly