LDAPS registration/sync for Identity Server fails on fresh install or upgrade to NSX-T Data Center 3.0.0

Products

• VMware NSX Networking

Issue/Introduction

This article provides workaround steps for an LDAP Server to work with NSX-T Data Center 3.0.0.

Symptoms:

• On fresh install of NSX-T Data Center 3.0.0, under Identity Firewall AD, an LDAP server cannot be added when LDAPS protocol is selected
• On upgrade to NSX-T Data Center 3.0.0, the configured sync fails to the AD server.  

Environment

VMware NSX-T Data Center 3.x
VMware NSX-T Data Center

Resolution

This issue is resolved in VMware NSX-T Data Center 3.0.1, available at VMware Downloads.

Workaround:
To work around this issue:

• For fresh install, when adding a Identity Firewall AD, use LDAP protocol when adding a LDAP server.
• For upgrade to NSX-T Data Center 3.0.0, edit LDAP details to use LDAP protocol instead of LDAPS protocol.