Device redeployment failing with Invalid authentication credentials


Problem:


Unable to redeploy the workflow > devices when Regenerate option is checked and the Org is setup for PKI authentication. The task shows the: "Request has invalid authentincation credentials"



 


The context of this article is having appliances deployed in an Org with PKI based IKE authentication and relevant CMS Connector: 




Only with this kind of setup, will there be a Regenerate option available under Workflow > Devices for renewing the certificate:



Solution:


1. Validate the connector:


The invalid authentication credentials indicate that the Director is unable to establish a connection with CMS connector. The same can be confirmed by trying to validate the connector:




If you see an error like below, that means you will need to update the Service Account key on the CMS connector, to be able to establish a successful connection:



2. Update Service Account Key:


Please contact your CMS Flavor vendor, like in this case the GCP admin to obtain a new service account key and update the same on the Director by browsing and uploading the file:



Once done, you can perform the Validate Connector step again and it should show you Valid credentials:



3. Once the credentials, you can now proceed to Redeploy the device with Regenerate option.