After changing certificates on SDDC Manager, Federation operations may fail.

Products

• VMware Cloud Foundation

Issue/Introduction

Symptoms:

• If Email field is used when generating CSR, kafka broker fails to interpret the email correctly and the client broker communication fails. 
• This may result in failure of subsequent VMware Cloud Foundation Federation workflows like Join, Leave and Teardown.

Environment

VMware Cloud Foundation 4.0.x

Resolution

This is a known issue affecting all VMware Cloud Foundation up 4.0.x and will be resolved in a future release.

Workaround:
To workaround this issue, create a new CSR without a value for the 'email' field and replace the SDDC Manager certificate.