"Unable to update CM service info" while connecting to the Update Manager 6.5

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• When we click on Update manager tab we get an error message "Problem occurred while connecting to the Update Manager server. See the vSphere Web Client logs for more details".

updatemgr-utility.log:
[2019-11-19 12:19:35,876 INFO] Install Key store for Jetty
[2019-11-19 12:19:36,905 INFO] Keystore installed successfully.
[2019-11-19 12:19:37,203 INFO] Updating VUM extension with VC
[2019-11-19 12:19:37,433 INFO] Updating CM service info
[2019-11-19 12:19:37,433 INFO] Enter updateCmServiceInfo
[2019-11-19 12:19:37,433 INFO] Client's property file: /usr/lib/vmware-updatemgr/firstboot/updatemgr.properties
[2019-11-19 12:19:37,625 ERROR] CM ReRegisterService failure. Exception is (cis.cm.fault.ComponentManagerFault) {
   dynamicType = <unset>,
   dynamicProperty = (vmodl.DynamicProperty) [],
   msg = '',
   faultCause = <unset>,
   faultMessage = (vmodl.LocalizableMessage) [],
   errorCode = 0,
   errorMessage = 'UNKNOWN'
}
[2019-11-19 12:19:37,625 ERROR] Unable to update CM service info

cm.log
2019-11-19T12:19:37.477+01:00 [pool-2-thread-1 [] INFO  com.vmware.vim.lookup.client.SiteAffinityServerEndpointProvider (95e80f53-2516-487a-b704-d2760bbd8add)] Site affinity is disabled
2019-11-19T12:19:37.602+01:00 [pool-2-thread-1 [] INFO  com.vmware.vim.sso.client.impl.SiteAffinityServiceDiscovery (95e80f53-2516-487a-b704-d2760bbd8add)] Site affinity is disabled
2019-11-19T12:19:37.621+01:00 [pool-2-thread-1 [] ERROR com.vmware.vim.sso.client.impl.SoapBindingImpl (95e80f53-2516-487a-b704-d2760bbd8add)] The SSL certificate of STS service cannot be verified
com.vmware.vim.sso.client.impl.ssl.UntrustedSslCertificateException: The SSL certificate of STS service cannot be verified
 at com.vmware.vim.sso.client.impl.ssl.StsSslTrustManager.validateServerIdentityWithThumbprint(StsSslTrustManager.java:227) ~[wstClient.jar:?] 

Environment

VMware vCenter Update Manager 6.5.x

Cause

The update manager service is failing to start since the STS_INTERNAL_SSL_CERT certificate is expired.

Resolution

This issue can be resolve by replacing the STS_INTERNAL_SSL_CERT certificate with the MACHINE_SSL_CERT certificate.

For more information, please refer to KB article to replace the STS_INTERNAL_SSL_CERT certificate: Process to replace the STS_INTERNAL_SSL_CERT with the machine cert from the MACHINE_SSL_CERT