VMware Cloud Foundation upgrade fails due to certificate error between SDDC Manager and Platform Service Controller

Products

• VMware Cloud Foundation

Issue/Introduction

Symptoms:

• An upgrade will fail from version 2.3.0 to 2.3.1 with a Certificate error between the SDDC Manager and the Platform Services Controller
• Running /opt/vmware/sddc-support/sos --pre-upgrade-check prior to running the upgrade, you will see a certificate error in the /var/tmp/healthcheck-<DATE>/sos.log file.

 

2018-05-04T16:46:19.818Z [INFO commandutils.py::execute_cmd_locally::215::MainThread] Execute cmd: /opt/vmware/cert-mgmt/bin/vcfcerthelper --action verify-trust --cert_dir /var/tmp/healthcheck-2018-05-04-16-46-12-25880 2018-05-04T16:46:51.433Z [INFO commandutils.py::execute_cmd_locally::236::MainThread] RC: 1 2018-05-04T16:46:51.434Z [DEBUG fileutils.py::get_certificates::275::MainThread] vcfcerthelper failed 2018-05-04T16:46:51.434Z [DEBUG fileutils.py::get_certificates::276::MainThread] 2018-05-04T16:46:51.434Z [DEBUG fileutils.py::get_certificates::277::MainThread] Login to PSCs directly and get the cert.

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware Cloud Foundation 2.3.x

Resolution

To resolve this issue, follow the instructions in the Platform Services Controller Administration guide to Enable SSH Login.