NSX Intelligence node and localhost-subscriber certificates are changed after upgrading from NSX Intelligence 1.0.* to NSX Intelligence 1.2

Products

• VMware Edge Network Intelligence

Issue/Introduction

Symptoms:

• New policy configuration changes such as Group and DFW will not get reflected correctly on NSX Intelligence UI.

Cause

• New policy configuration changes such as Group and DFW will not get reflected correctly on NSX Intelligence UI.

Resolution

1. Connect to any NSX Manager using admin user and SSH: ssh admin@<nsxmanager-ip>
2. Run command - ‘get cluster status verbose’:

Group Type: POLICY
Group Status: STABLE
 

Members:
 

UUID	FQDN	IP	STATUS
f9632642-c0de-b329-ac3e-653046ef07e7	nsxmanager-1	<nsxmanager-1-ip>	UP
307c2642-4ce1-8a73-4bbf-4c3d53ac6d5d	nsxmanager-2	<nsxmanager-2-ip>	UP
9de72642-cf7d-cdf5-c68b-b0c442cf1e5b	nsxmanager-3	<nsxmanager-3-ip>	UP

Leaders:
 

POLICY_PACE_AGENT_SERVICE

f9632642-c0de-b329-ac3e-653046ef07e7

12475

 

3. Connect to NSX Manager which is the leader of POLICY_PACE_AGENT_SERVICE using admin user and SSH: ssh admin@<nsxmanager-1-ip>
4. Restart policy service: restart service policy
5. Verify cluster is stable using CLI and UI: get cluster status

Cluster Id: 06280af4-2dab-4817-9a2e-14ee433b406f
Overall Status: STABLE

3. Connect to NSX Intelligence using admin user and ssh
4. Restart nsx-config service: restart service nsx-config