Error: "Key creation failed on key provider <Key Provider Name> with error code QLC_ERR_NO_BATCH_COUNT"

Products

• VMware vCenter Server

Issue/Introduction

When attempting to integrate a vTPM into a virtual machine, an error occurs in the GUI stating "Key creation failed on key provider <Key Provider Name> with error code QLC_ERR_NO_BATCH_COUNT."

Environment

VMware vCenter Server 7.x

Cause

When editing a KMS cluster that uses certificate client authentication, it's possible the web browser will set a username and password authentication method instead when clicking save. 

The vendor's KMS logs may display a error similar to the following "Certificate user must match username in Authentication request" (This will be different per vendor.)

Resolution

Clear the invalid username to allow the client certificate to be used. 

1. Snapshot vCenter
2. Connect to vCenter postgres database with command: 
   • /opt/vmware/vpostgres/current/bin/psql -U postgres VCDB
3. Clear username from KMS table:
   • update vpx_crypto_server set user_name = '';
4. Reboot vCenter