Symptoms:
Note: The Side_ID can be listed using the following API call:
GET <GLOBAL_Manager_IP>/global-manager/api/v1/global-infra/sites
Example:
https://<Global_manager_FQDN>/api/v1/ui-controller/overall-edge-clusters-rtep-status?site_id=494d6a89-####-####-####-8ffbb680050f{
"httpStatus": "BAD_REQUEST",
"error_code": 513031,
"module_name": "Policy",
"error_message": "Error retrieving edge clusters RTEP status. Please contact the administrator."
From the Global Manager var/log/Syslog similar error messages are observed:
2021-05-14T17:22:33.696Z INFO http-nio-127.0.0.1-64440-exec-2 NsxTrustManager 31858 SYSTEM [nsx@6876 comp="global-manager" level="INFO" reqId="427e914f-####-####-####-e6839b5a9120" subcomp="global-manager" username="<Username>"] Trust certificate for CN=<CN>,OU=<OU>,O=<O>,L=<L>,ST=<ST>,C=<C>
2021-05-14T17:22:33.733Z INFO http-nio-127.0.0.1-64440-exec-2 RemoteEdgeClusterServiceImpl 31858 - [nsx@6876 comp="global-manager" level="INFO" reqId="427e914f-####-####-####-e6839b5a9120" subcomp="global-manager" username="<Username>"] Was not able to get data from remote site 494d6a89-####-####-####-8ffbb680050f. Error org.springframework.web.client.HttpServerErrorException$InternalServerError: 500 : [{"module_name":"common-services","error_message":"Internal server error has occurred.","details":"Client certificate not found in trust store","error_code":99}].
2021-05-14T17:22:33.733Z ERROR http-nio-127.0.0.1-64440-exec-2 RemoteEdgeClusterServiceImpl 31858 - [nsx@6876 comp="global-manager" errorCode="MP513031" level="ERROR" reqId="427e914f-63f1-4d4a-98f4-e6839b5a9120" subcomp="global-manager" username="<username>"] error while retrieving Edge clusters RTEP Status From all LM nodes
Code fix available in NSX-T 3.1.3.7 and above.
This issue does not exist with self-signed certificates.