"Plug-in configuration with Reverse Proxy failed"

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• Download or Deploy plug-in task fails at 0% with error "Plug-in configuration with Reverse Proxy failed"
• Under Client Plugins status shows as "Failed"
• Removing Plug-in from vcenter server mob page and re-starting vsphere-ui does not help. 

• vsphere_client_virgo.log located in /var/log/vmware/vsphere-ui/logs/vsphere_client_virgo.log contains the following error messages:

[YYYY:MM:DD] [ERROR] sdk-plugin-deployer-196       c.v.v.p.p.JsonFileBasedRemotePluginReverseProxyConfigurer         Cannot add proxy rules for {packageRef = com.vmware.vlcm.client:8.0.2.22617221, manifestUrl = https://vctest.lab.local:9087/vci/downloads/vlcm-ui/plugin.zip=[url = https://vctest.lab.local:9087/vum-fileupload/,type = HTTP_FILE_UPLOAD,sslPeerAuthenticationData = SslPeerCertificateThumbprintData{thumbprint=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx}, url = https://vcfqdn.local:443,type = cis.common.skipreg,sslPeerAuthenticationData = SslPeerCertificateThumbprintData{thumbprint=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx}, url = https://vcfqdn.local:9087/vci/downloads/vlcm-ui/plugin.zip,type = MANIFEST_SERVER,sslPeerAuthenticationData = SslPeerCertificateThumbprintData{thumbprint=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx}]}. Plugin service initial configuration is not ready/was not successful.
[YYYY:MM:DD] [INFO ] sdk-plugin-deployer-196       com.vmware.vise.plugin.extension.VcExtensionManager               Cleaning up extension: com.vmware.vlcm.client:8.0.2.22617221
[YYYY:MM:DD] [INFO ] sdk-plugin-deployer-196       c.vmware.vise.extensionfw.impl.plugin.PluginExtensionManagerImpl  Extensions for plugin com.vmware.vlcm.client:8.0.2.22617221 were removed from the cache.
[YYYY:MM:DD] [ERROR] sdk-plugin-deployer-195       com.vmware.vise.plugin.status.RemotePluginStatusServiceImpl       DEPLOYMENT_FAILED: Error deploying plugin package com.vmware.vsan.client:8.0.202.10000. Reason: Plugin configuration with Reverse Proxy failed. 

 

• rhttpproxy-xx.log located in /var/log/vmware/rhttpproxy/rhttpproxy-xx.log contains the following error message:

[YYYY:MM:DD] error rhttpproxy[2501235] [Originator@6876 sub=RhttpProxy] [Rhttpproxy JWT] Missing privilege! Global.Proxy is required. [YYYY:MM:DD] error rhttpproxy[2501235] [Originator@6876 sub=RhttpProxy] [Rhttpproxy REST PUT Handler] JWT verification failed
 

Environment

VMware vCenter Server 8.0.2
VMware vCenter Server 8.0.x

Cause

Role name "vSphere Client Service Account" is missing the Global.Proxy privilege.

Resolution

Refer to the steps below to grant the missing Global.Proxy privilege to the "vSphere Client Service Account" role.

• Open the browser and login to vCenter Server webclient using SSO Administrator ex: [email protected]
• Navigate to Administration >Access Control > Roles
• Select vSphere Client Service Account and click on edit.
• Navigate to the Global section and select the Proxy option as mentioned below:
• Re-start the rhttpproxy and vsphere-ui service using the below commands
• NOTE: If the vCenter servers are in linked mode re-start both the service on all the linked nodes. 
  • service-control --restart rhttpproxy
  • service-control --restart vsphere-ui
• Under Client plugins you will see all the plugin status as Deployed.