vRealize workflow fails in SDDC Manager with "Unable to find certificate chain".

Products

• VMware Cloud Foundation

Issue/Introduction

Symptoms:

When a vRealize specific workflow fails in SDDC Manager (ex. vRealize X connect with Workload domain), and in the /var/log/vmware/vcf/domainmanager/domainmanager.log file there is a snippet similar to this:

PKIX path building failed: java.security.cert.CertPathBuilderException: Unable to find certificate chain.

Environment

VMware Cloud Foundation 4.4

Cause

Mismatch between the certificate of actual vRealize product and the certificate that is in SDDC Manager trust store.

Resolution

Currently there is no resolution.

Workaround:

To workaround the issue:

1. Open the vRealize Suite Lifecycle Manager UI and log in.
2. Select the environment where the respective product is.  
3. Trigger inventory sync operation and wait to complete.

After successful inventory sync, the certificate in the SDDC Manager trust store will match the actual certificate and the failed workflow can be retried.