Creating a Workload Domain may fail with error "Failed to add VM <vc-moid> to firewall exclusion list".

Products

• VMware Cloud Foundation

Issue/Introduction

Symptoms:

• When creating a WorkLoad Domain, after the Work Domain vCenter is deployed, the workflow could fail at AddVmsToNsxFirewallExclusionListAction, with the error "Failed to add VM <vc-moid> to firewall exclusion list"

Environment

VMware Cloud Foundation 3.8.x

Resolution

This is a known issue, to workaround this and continue with the Workload Domain deployment complete the following steps.

1. Open the NSX Manager Admin UI page and navigate to Manage vCenter Registration.
2. Click the Edit button on the vCenter Server section and re-enter the credential and click OK. This will re-sync the connection between the NSX Manager and vCenter. 
3. Restart the failed workflow. 

Note: Should the task fail, the NSX Manager VM may need to be rebooted.