Service VM deployment failed with "Some error has occurred"
Article ID: 319042
Updated On: 04-21-2025
Products
VMware NSX
Issue/Introduction
Service VM deployment fails with "Error creating agency for deployment unit <UUID>. Some error has occurred.. Delete this deployment and create another one."
Example logging in /var/log/proton/nsxapi.log:
20##-##-##T##:##:##.###Z INFO UfoIndexer-search_manager-0 DeploymentStatusServiceImpl 15398 FABRIC [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Cached deployment status for DU id DeploymentUnit/<UUID> is DeploymentStatus [deploymentProgressState=DEPLOYMENT_FAILED, deploymentGoalState=ENABLED, issues=[Issue [errorMessage=Error creating agency for deployment unit <UUID>. Some error has occurred.. Delete this deployment and create another one., linkedId=null, occurredAtTime=null, errorId=26134]]]
20##-##-##T##:##:##.###Z ERROR http-nio-127.0.0.1-7440-exec-11 SfdmOvfCertificateValidator 20222 FABRIC [nsx@6876 comp="nsx-manager" errorCode="MP31703" level="ERROR" reqId="<UUID>" subcomp="manager" username="admin"] invalid_certificate_file. Error : [PARSE_ERROR: CERTIFICATE_INVALID_DIGEST at 1; ]
20##-##-##T##:##:##.###Z INFO http-nio-127.0.0.1-7440-exec-11 InternalDeploymentServiceImpl 20222 FABRIC [nsx@6876 comp="nsx-manager" level="INFO" reqId="<UUID>" subcomp="manager" username="admin"] Updating existing deployment Unit:DeploymentUnit [id=<UUID>, fabricModuleId=FabricModule/<UUID>, fabricModuleVersion=1.0, computeResourceType=COMPUTE_COLLECTION, computeResourceId=<UUID>:domain-X, agencyId=null, goalState=ENABLED, isVlcmFlow=false, errors=null] to new deploymentUnit: DeploymentUnit [id=<UUID>, fabricModuleId=FabricModule/<UUID>, fabricModuleVersion=1.0, computeResourceType=COMPUTE_COLLECTION, computeResourceId=<UUID>:domain-X, agencyId=null, goalState=ENABLED, isVlcmFlow=false, errors={26134=Error creating agency for deployment unit <UUID>. Some error has occurred.. Delete this deployment and create another one.}]
20##-##-##T##:##:##.###Z WARN http-nio-127.0.0.1-7440-exec-11 InternalDeploymentServiceImpl 20222 FABRIC [nsx@6876 comp="nsx-manager" level="WARNING" reqId="<UUID>" subcomp="manager" username="admin"] [HostPinned]: Failed to create agency for deployment unit:DeploymentUnit/<UUID> for installation
com.vmware.nsx.management.ovfops.exception.CertificateManifestValidationError: null
at com.vmware.nsx.management.service_fabric.sfdm.ovf.SfdmOvfCertificateValidator.parseCertificate(SfdmOvfCertificateValidator.java:94) ~[?:?]
at com.vmware.nsx.management.service_fabric.sfdm.ovf.SfdmOvfCertificateValidator.validateSignature(SfdmOvfCertificateValidator.java:102) ~[?:?]
at com.vmware.nsx.management.ovfops.validator.service.OvfCertificateValidator.validateCertificateContent(OvfCertificateValidator.java:66) ~[?:?]
In this example, the certificate hash is SHA256:
20##-##-##T##:##:##.###Z INFO http-nio-127.0.0.1-7440-exec-11 OvfOperator 20222 FABRIC [nsx@6876 comp="nsx-manager" level="INFO" reqId="<UUID>" subcomp="manager" username="admin"] Loaded manifest : [<Service Deployment>.mf] for [Host_Pinned_VM]. Content : [SHA256(<Service Deployment>.ovf)= <hash>
SHA256(<Service Deployment>.vmdk)= <hash>
]
Example logging in /var/log/proton/nsxapi.log:
20##-##-##T##:##:##.###Z INFO UfoIndexer-search_manager-0 DeploymentStatusServiceImpl 15398 FABRIC [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Cached deployment status for DU id DeploymentUnit/<UUID> is DeploymentStatus [deploymentProgressState=DEPLOYMENT_FAILED, deploymentGoalState=ENABLED, issues=[Issue [errorMessage=Error creating agency for deployment unit <UUID>. Some error has occurred.. Delete this deployment and create another one., linkedId=null, occurredAtTime=null, errorId=26134]]]
20##-##-##T##:##:##.###Z ERROR http-nio-127.0.0.1-7440-exec-11 SfdmOvfCertificateValidator 20222 FABRIC [nsx@6876 comp="nsx-manager" errorCode="MP31703" level="ERROR" reqId="<UUID>" subcomp="manager" username="admin"] invalid_certificate_file. Error : [PARSE_ERROR: CERTIFICATE_INVALID_DIGEST at 1; ]
20##-##-##T##:##:##.###Z INFO http-nio-127.0.0.1-7440-exec-11 InternalDeploymentServiceImpl 20222 FABRIC [nsx@6876 comp="nsx-manager" level="INFO" reqId="<UUID>" subcomp="manager" username="admin"] Updating existing deployment Unit:DeploymentUnit [id=<UUID>, fabricModuleId=FabricModule/<UUID>, fabricModuleVersion=1.0, computeResourceType=COMPUTE_COLLECTION, computeResourceId=<UUID>:domain-X, agencyId=null, goalState=ENABLED, isVlcmFlow=false, errors=null] to new deploymentUnit: DeploymentUnit [id=<UUID>, fabricModuleId=FabricModule/<UUID>, fabricModuleVersion=1.0, computeResourceType=COMPUTE_COLLECTION, computeResourceId=<UUID>:domain-X, agencyId=null, goalState=ENABLED, isVlcmFlow=false, errors={26134=Error creating agency for deployment unit <UUID>. Some error has occurred.. Delete this deployment and create another one.}]
20##-##-##T##:##:##.###Z WARN http-nio-127.0.0.1-7440-exec-11 InternalDeploymentServiceImpl 20222 FABRIC [nsx@6876 comp="nsx-manager" level="WARNING" reqId="<UUID>" subcomp="manager" username="admin"] [HostPinned]: Failed to create agency for deployment unit:DeploymentUnit/<UUID> for installation
com.vmware.nsx.management.ovfops.exception.CertificateManifestValidationError: null
at com.vmware.nsx.management.service_fabric.sfdm.ovf.SfdmOvfCertificateValidator.parseCertificate(SfdmOvfCertificateValidator.java:94) ~[?:?]
at com.vmware.nsx.management.service_fabric.sfdm.ovf.SfdmOvfCertificateValidator.validateSignature(SfdmOvfCertificateValidator.java:102) ~[?:?]
at com.vmware.nsx.management.ovfops.validator.service.OvfCertificateValidator.validateCertificateContent(OvfCertificateValidator.java:66) ~[?:?]
In this example, the certificate hash is SHA256:
20##-##-##T##:##:##.###Z INFO http-nio-127.0.0.1-7440-exec-11 OvfOperator 20222 FABRIC [nsx@6876 comp="nsx-manager" level="INFO" reqId="<UUID>" subcomp="manager" username="admin"] Loaded manifest : [<Service Deployment>.mf] for [Host_Pinned_VM]. Content : [SHA256(<Service Deployment>.ovf)= <hash>
SHA256(<Service Deployment>.vmdk)= <hash>
]
Environment
VMware NSX-T Data Center 3.x
VMware NSX 4.x
Cause
There are many potential problems with the certificate manifest that can cause this sort of parsing error.
Resolution
There is no resolution in NSX as there is something incorrect about the certificate manifest for the Service Deployment.
SHA256 signed certs are supported from NSX 4.1 and onwards.
Workaround:
Delete the failed Service Deployment and deploy again with valid certificate files.
SHA256 signed certs are supported from NSX 4.1 and onwards.
Workaround:
Delete the failed Service Deployment and deploy again with valid certificate files.
Additional Information
Impact/Risks:
Service VM deployment fails.
Service VM deployment fails.
Feedback
Was this article helpful?
Yes
No
Powered by
