"Unable to create Lookup Service gateway" error when configuring a Cloud Director Availability appliance

Products

• VMware Cloud Director

Issue/Introduction

Symptoms:

• Configuring a Cloud Director Availability appliance via the initial setup wizard fails with the error:

Unable to create Lookup Service gateway.

• In /opt/vmware/h4/replicator/log/replicator.log on the On-Premises appliance, you see entries similar to:

2020-09-02 10:29:57.431 ERROR - [UI-3bb34078-2646-467c-9657-82057518b2c3-UE] [https-jsse-nio-8440-exec-5] c.v.h4.common.service.BaseConfigService : Failed to connect to lookup service at https://10.104.10.70:443/lookupservice/sdk.

com.vmware.exception.GenericSSLException: com.vmware.vim.vmomi.core.exception.CertificateValidationException: Server certificate chain is not trusted and thumbprint verification is not configured
at com.vmware.exception.converter.ClientExceptionConverter.convertException(ClientExceptionConverter.java:64)
...
2020-09-02 10:29:57.434 ERROR - [UI-3bb34078-2646-467c-9657-82057518b2c3-UE] [https-jsse-nio-8440-exec-5] c.v.h.c.c.error.ExceptionAdvisorBase : A POST request from root[10.103.131.66] to /config/check-sso failed.

com.vmware.h4.exceptions.common.FailedToConnectToLookupServiceException: Cannot connect to Lookup Service at 'https://10.104.10.70:443/lookupservice/sdk'. Make sure the address is correct and accessible.

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware Cloud Director Availability 4.x
VMware vCloud Availability 3.0.x
VMware vCloud Availability 3.5.x

Cause

This issue occurs when the Cloud Director Availability appliance is unable to resolve the Platform Services Controller address specified in the Lookup Service section of the wizard.

Resolution

To resolve this issue, ensure that each Cloud Director Availability appliance can resolve the address of their local Platform Services Controller.

Note: If you plan to use FQDNs for components in a Cloud Director Availability installation, you must verify that the FQDN of each component is resolvable by a DNS server and that reverse lookup is implemented using PTR records.

Additional Information

• For more information about the network requirements in a cloud site, see the Network Requirements section of the Cloud Director Availability documentation.
• For more information about the network requirements in an on-premises site, see the Deployment Requirements On-Premises section of the Cloud Director Availability documentation.