"Operation aborted due to an unexpected error." message in the Sites view of the vCloud Availability 3.x Portal

Products

• VMware Cloud Director

Issue/Introduction

Symptoms:

• In the Sites view of the vCloud Availability Portal, you see the a similar error in the Cloud sites section:

Operation aborted due to an unexpected error.

• In /opt/vmware/h4/cloud/log/cloud.log on the vApp Replication Manager of both cloud sites, you see a similar error:

2019-12-10 16:12:26.689 ERROR - [UI__34690fcc-b90e-####-####-########312_he] [https-jsse-nio-8046-exec-8] c.v.h.c.c.error.ExceptionAdvisorBase : A POST request from root[192.168.2.105] to /config/tunnel-service failed.
2019-12-10 16:12:52.173 ERROR - [UI__34690fcc-b90e-####-####-########312_Px] [https-jsse-nio-8046-exec-9] c.v.h.c.c.error.ExceptionAdvisorBase : A POST request from root[192.168.2.105] to /config/tunnel-service failed.
2019-12-10 16:13:25.719 ERROR - [UI__9f7a92a9-0093-####-####-########f75_DF] [https-jsse-nio-8046-exec-10]

• In /opt/vmware/h4/tunnel/log/tunnel.log on the vCloud Availability Tunnel of both cloud sites, you see a similar error:

2019-12-10 16:11:25.200 ERROR - [1e112869-7db5-####-####-########bab_ll] [https-jsse-nio-8047-exec-8] c.v.h.c.c.error.ExceptionAdvisorBase : A POST request from null[192.168.2.109] to /api-client-auth failed.
2019-12-10 16:11:50.682 ERROR - [81666cd3-634c-46####-####-########8fe_Bu] [https-jsse-nio-8047-exec-6] c.v.h.c.c.error.ExceptionAdvisorBase : A POST request from null[192.168.2.109] to /api-client-auth failed.

• This issue occurs after updating the vApp Replication Manager certificates in multiple paired cloud sites.

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware vCloud Availability 3.0.x
VMware vCloud Availability 3.5.x

Cause

This issue occurs when the vApp Replication Managers in both cloud sites are configured with the same wildcard certificate.

Resolution

To resolve this issue, ensure that each vApp Replication Manager is configured with a unique certificate.

Each vCloud Availability service must have a unique certificate which is different from other services certificates.

When using wildcard certificates, you can use a wildcard certificate only for the vCloud Availability vApp Replication Manager service. To keep the certificates unique, you must use self-signed certificates for the remaining vCloud Availability services. Do not use the same wildcard certificate for more than one cloud site.

Additional Information

For more information, see the Replacing vCloud Availability Certificates section of the vCloud Availability Documentation