Troubleshooting SDDC Manager UI access Issues

Products

• VMware Cloud Foundation

Issue/Introduction

• The SDDC Manager UI is inaccessible or is stuck loading:

Environment

VMware Cloud Foundation 

Resolution

Perform the following troubleshooting steps to isolate the issue and identify a proper resolution.

1. Disk Space Issues:

• SSH into SDDC Manager, login as vcf, login to root with the command su root.
• Check the disk space with the following command: 
  • df -h 
• Check if any of the partitions on SDDC Manager have over 80% usage
• cd into any full directories and clear out files as needed to clean up space 

Please refer to KB: Messages log not rotating

 

2. SSO password changed/does not match: 

• Please follow KB: Logging into SDDC Manager fails with IDENTITY_INTERNAL_SERVER_ERROR

 

3.  Root vCenter password changed/does not match 

• Run the command: lookup_passwords and pull the password for resource VCENTER
  • This will pull the password for the root account on the vCenter.

To test if this password was changed/does not match, SSH into vCenter directly with the password from SDDC Manager. If it fails to log in, the password is either locked out or does not match. 

Please follow KB: Reset Root Password to unlock and reset

Note: SDDC requires SSH access to vCenter. Ensure that SSH is enabled on the Management vCenter (of the Management Domain).

 

4.  vCenter Server service accounts disconnected failed to authenticate errors

• Run the VCF Diagnostic Tool for SDDC Manager and inspect the CREDENTIAL CHECKS section for service account authentication failures
• If any are found, retrieve the service accounts credentials from SDDC Manager, and update those individual accounts passwords in their respective vCenter Servers using the vSphere Client UI

 

5. The SDDC Manager Certificate has expired 

• If the SDDC Manager Certificate expires, the SDDC Manager UI will become inaccessible. To check if that certificate is expired, run VDT on the SDDC Manager.
• If it has expired, follow KB: Reset SDDC Manager Certificate to replace the certificate.

 

6. SDDC Manager does not trust the Management vCenter Root Certificate 

• To rule this out, follow KB: Import vCenter Root Cert into SDDC Manager Truststore and run the root sync script.

 

7. NTP

• This can cause slowness within the UI and prevent it from loading.
• Run these commands to check NTP and reset the service:
  • ntpq -p
  • systemctl stop ntpd.service
  • ntpdate ntp_server_ip
  • systemctl start ntpd.service
  • systemctl restart ntpd.service
  • ntpq -p

Additional Information

If locked out of the SDDC appliance, run through KB: 323984 to unlock and reset the vcf and root user accounts.