VCD cell configuration fails during database configuration with error " setupvcd script failed to execute"

Products

• VMware Cloud Director

Issue/Introduction

• Unable to deploy primary VCD appliance or add a standby cell as it fails on the configure-vcd script. 
• In /opt/vmware/vcloud-director/logs/cell-management-tool.log during deployment of primary appliance, you see entries similar to:
  
  com.vmware.vcloud.cell.management.CellManagementTool.start(CellManagementTool.java:347)
  com.vmware.vcloud.cell.management.CellManagementTool.main(CellManagementTool.java:244)
  com.vmware.vcloud.cell.management.CellManagementTool.main(CellManagementTool.java:276)
  Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  
  
• Standby cell setup fails during database configuration and you see entries similar to following in /opt/vmware/var/log/vcd/configure-vcd.log and  /opt/vmware/var/log/vcd/appliance-sync.log
  
  configure-vcd.log:
  
  Reconfiguring vCD to use a secure database connection.
  setupvcd.sh | Reconfiguring vCD to use a secure database connection.
  Invalid database configuration provided. Aborting configuration of local cell.
  | setupvcd.sh | [ERROR] Failed to run reconfigure-database. See /opt/vmware/vcloud-director/logs/cell-management-tool.log for details. Aborting.
  | configure-vcd.sh | [ERROR] setupvcd script failed to execute
  
  
  appliance-sync.log:
  
  | Adding certificate for node node-########-####-####-####-######## to local trust store.
  | Timed out adding certificate for node node-########-####-####-####-########, continuing to other nodes.
  | Successfully completed run of appliance sync script
  
  

  

Environment

VMware Cloud Director 10.x

Cause

This issue occurs due to a timeout issue while trying to import the certificate

Resolution

To resolve the issue, perform the following steps:

1. Open an SSH session the primary cell or the failed standby cell
2. Navigate to '/opt/vmware/appliance/bin/' and edit the following file: appliance-sync.sh
3. Navigate to the following line:
   
   /usr/bin/timeout 10s $VCLOUD_HOME/bin/cell-management-tool import-trusted-certificates --source $APPLIANCE_SHARE/$i/vcd_ova.crt --force.
   
   
4. Extend the timeout to 25 seconds by changing 10s to 25s.
5. The line should now read as: 
   
   /usr/bin/timeout 25s $VCLOUD_HOME/bin/cell-management-tool import-trusted-certificates --source $APPLIANCE_SHARE/$i/vcd_ova.crt --force
   
   
   Save the file and the appliance should deploy now.