NSX UI Certificates page fails to load and "Index out of sync" error
search cancel

NSX UI Certificates page fails to load and "Index out of sync" error

book

Article ID: 324245

calendar_today

Updated On: 10-21-2024

Products

VMware NSX

Issue/Introduction

  • NSX UI Certificate page will not load
  • NSX UI search is not working
  • NSX UI reports an error
Error: Index out of sync, please resync via 'start search resync {0}'. (Error code: 60516)
  • In some cases UI may also report the warning
System is still in uncertain state please reload
  • Logs will have an exception in /var/log/proton/nsxapi.log similar to this example
2023-03-03T12:45:32.074Z ERROR pool-776-thread-1 UfoIndexingServiceImpl 13446 - [nsx@6876 comp="nsx-manager" errorCode="MP60503" level="ERROR" subcomp="manager"] [Indexing: BatchProcessing] The Bulk indexing request could not be processed: org.elasticsearch.action.bulk.BulkRequest@7563b312
org.elasticsearch.action.ActionRequestValidationException: Validation Failed: 1: index is missing;2: index is missing;3: index is missing; 
  • GET /api/v1/trust-management/certificates returns one or more certificates which have "service_types" of any of these values

     

"Node API Certificate"
"MGMT_PLANE_DNE"
"Client Authentication"
"Cluster API Certificate" 

Environment

VMware NSX-T Data Center 3.x
VMware NSX 4.x
The environment has been upgraded in the past from a version prior to 3.x.

Cause

NSX environments that started on older versions of NSX, typically pre-3.x may still have old certificates in the system.
NSX 3.2.x and 4.x fails to handle certificates with an old service type as they are not used on these versions.

Resolution

This issue is resolved in VMware NSX-T Data Center 3.2.3.0
This issue is resolved in VMware NSX 4.0.2.0
This issue is resolved in VMware NSX 4.1.1.0

If you have encountered this issue on a version prior to the fixed version, please open a support case with Broadcom Support referring to this KB article.
For more information, see Creating and managing Broadcom support cases.