Cannot log in to vCenter Server using vSphere Web Client on vCenter Server HA setup joined to domain

Products

• VMware vSphere ESXi

Issue/Introduction

If a vSphere administrator joins a vCenter Server Appliance to a domain, the DNS server's clock must be in sync with the vCenter Server Appliance clock. When you clone the passive and witness nodes on the vCenter Server HA deployment, the Clone Customization takes the DNS server's time and applies it to the passive and witness nodes. If the clocks are not in sync, vCenter Server fails over and you cannot log in to vCenter Server by using vSphere Web Client.

Environment

VMware vSphere ESXi 6.5

Resolution

Sync the time between vCenter Server Appliance (by using Platform Services Controller), vCenter Server Appliance (by using vCenter Server), and the DNS server's machine to join the domain.