Joining an SDDC Manager to an existing Federation fails with a HTTP 400 error

Products

• VMware Cloud Foundation

Issue/Introduction

Symptoms:

• In certain cases when trying to join an SDDC Manager to an existing Multi-Site Federation, Nginx on the SDDC Manager fails to verify the certificate chain.
• You see the following error in /var/log/vmware/vcf/pantheon/pantheon-<SDDC Manager FQDN>.log:
  Caused by: com.vmware.vcf.pantheon.common.exception.PantheonException: Http response code 400

Environment

VMware Cloud Foundation 3.10.x
VMware Cloud Foundation 3.9.x

Cause

This is a known issue affecting VMware Cloud Foundation 3.x.

Resolution

Currently there is no resolution.

Workaround:

1. Download the attached script configurenginx.sh
2. Using a file transfer utility such as WinSCP, copy configurenginx.sh to /home/vcf/ on the SDDC Manager VM.
3. Open an SSH session to the SDDC Manager VM and change to the root user:
   su -
4. Change directory to /home/vcf:
   cd /home/vcf
5. Add execute permissions to the script:
   chmod 500 /home/vcf/configurenginx.sh
6. Execute the script:
   sh /home/vcf/configurenginx.sh
7. Retry the join operation.