vCenter Certificate Management Page Is Blank

Products

• VMware vCenter Server 7.0

Issue/Introduction

• When navigated to vCenter certificate management the page is blank\empty with no errors.

• vsphere_client_virgo.log reports wrong entry from lookup service.

<serviceAttributes>
<key>com. vmware.vim. vcenter. instanceName</key>
<value>vcsa.lab.com.lab.com</value>
</serviceAttributes>

• lstool.py output reports incorrect service registration for service type "vcenterservice" under 'instanceName' attribute:

          Name: AboutInfo.vpx.name
          Description: AboutInfo.vpx.name
          Service Product: com.vmware.cis
          Service Type: vcenterserver
          Service ID: #####-#####-#####-#####-#####
          Site ID: default-first-site
          Node ID: #####-#####-#####-#####-#####
          Owner ID: vpxd-#####-#####-#####-#####-#####@vsphere.local
          Version: 7.0
          Endpoints:
                ...
                Type: com.vmware.cis.data.provider
                Protocol: vmomi
                URL: https://vcsa.lab.com:443/sdk
                         Endpoint Attributes:
                        cis.common.ep.localurl: http://localhost:8085/sdk
                ...
                Attributes:
                com.vmware.cis.cm.GroupInternalId: com.vmware.vim.vcenter
                com.vmware.cis.cm.ControlScript: service-control-default-vmon
                com.vmware.vim.vcenter.instanceName: vcsa.lab.com.lab.com
                com.vmware.cis.cm.HostId: #####-#####-#####-#####-#####

Environment

VMware vCenter Server 7.0 and later

Cause

This could happen if PNID change has attempted in the past.

Resolution

1. Take Snapshot. If VC is in ELM shutdown all VCs and take offline snapshot.

2. Download and install jxplorer.

3. Connect to vCenter server using JXplorer.

4. Navigate to Configuration--?Sites-->Expand the current site-->service registration.

5. Look for the service ID found from lstool.py output and search for property where incorrect value is configured and delete the additional local SSO domain name.

6. Restart vCenter services using below command.
   service-control --stop --all && service-control --start --all