Troubleshooting SDDC Manager UI access Issues

Products

• VMware Cloud Foundation

Issue/Introduction

• The SDDC Manager UI is inaccessible or is stuck loading:

Environment

VMware Cloud Foundation 

Resolution

Please follow these troubleshooting steps to identify the issue and implement a proper resolution.

1. Disk Space Issues:

• SSH into the SDDC Manager, login as vcf, and elevate to root with the command: su root
• Check disk space with the following command: 
  • df -h 
• Check if any of the partitions on the SDDC Manager have over 80% usage
• cd into any directories that are full and clear out files as needed to free up space 

Please refer to KB: SDDC Manager UI becomes inaccessible due to root (/dev/sda4) partition filling up

 

2. SSO password changed/does not match: 

• Please follow KB: Logging into SDDC Manager fails with IDENTITY_INTERNAL_SERVER_ERROR

 

3.  Root vCenter password changed/does not match 

• Run the command: lookup_passwords and pull the password for resource VCENTER
  • This will pull the password for the root account on the vCenter.

To test if this password was changed/does not match, SSH into the vCenter directly with the password from the SDDC Manager. If it fails to log in, the password is either locked out or does not match. 

Please follow KB: Reset Root Password to unlock and reset the password

Note: SDDC requires SSH access to vCenter. Ensure that SSH is enabled on the Management vCenter (of the Management Domain).

 

4.  vCenter Server service accounts disconnected failed to authenticate errors

• Run the VCF Diagnostic Tool for SDDC Manager and inspect the CREDENTIAL CHECKS section for service account authentication failures
• If any are found, Retrieve the service accounts credentials from SDDC Manager, and update those individual accounts passwords in their respective vCenter Servers using the vSphere Web Client

 

5. The SDDC Manager Certificate has expired 

• If the SDDC Manager Certificate expires, the SDDC Manager UI will become inaccessible. To check if that certificate is expired, run VDT on the SDDC Manager.
• If it has expired, follow KB: Reset SDDC Manager Certificate to replace the certificate.

 

6. SDDC Manager does not trust the Management vCenter Root Certificate 

• To verify, follow KB: Import vCenter Root Cert into SDDC Manager Truststore and run the root sync script.

 

7. NTP

• This can cause slowness within the UI and prevent it from loading.
• Run these commands to check NTP and reset the service:
  • ntpq -p
  • systemctl stop ntpd.service
  • ntpdate ntp_server_ip
  • systemctl start ntpd.service
  • systemctl restart ntpd.service
  • ntpq -p

Additional Information

If locked out of the SDDC appliance, run through KB: 323984 to unlock and reset the vcf and root user accounts.