The credentials rotate operation fails in specific situations

Products

• VMware Cloud Foundation

Issue/Introduction

VCF Day N workflow Credential rotation fails with the following message:

The time set on Compute Manager vcenter.example.com is ahead of the time set on NSX by 21,398 seconds. Update the time on Compute Manager or NSX so that the difference between them is less than 60 seconds and try again.

 

Environment

VMware Cloud Foundation 3.x
VMware Cloud Foundation 4.x

Cause

The NTP Server workflow gives a false positive where the NTP Server was not updated across all NSX-T managers which leads to a time difference.

Resolution

Workaround
To workaround the issue, the user needs to be unblocked.

• To unblock the user, login to each of the NSX-T Manager and update the NTP Server.

• Alternately, re-run the NTP/DNS workflow.

  • Note: The re-run will reset all the components (ESXi, vCenter, and NSX-T) to the VCF-value.

• Retry the rotate certificate workflow.