vCenter Certificate Management Page Is Blank

Products

• VMware vCenter Server 7.0

Issue/Introduction

When navigated to vCenter certificate management the page is blank\empty with no errors.

• vsphere_client_virgo.log reports wrong entry from lookup service.

  • <serviceAttributes>
      <key>com.vmware.vim.vcenter.instanceName</key>
      <value>vcsa.lab.com.lab.com</value>
    </serviceAttributes>

• lstool.py output reports incorrect service registration for service type "vcenterservice" under 'instanceName' attribute:

          Name: AboutInfo.vpx.name
          Description: AboutInfo.vpx.name
          Service Product: com.vmware.cis
          Service Type: vcenterserver
          Service ID: BF2C9B45-FAD3-4C7B-8995-81EF628E6694
          Site ID: default-first-site
          Node ID: 9d6cca3e-6106-4099-bc02-e203d6c6ae51
          Owner ID: [email protected]
          Version: 7.0
          Endpoints:
                ...
                Type: com.vmware.cis.data.provider
                Protocol: vmomi
                URL: https://vcsa.lab.com:443/sdk
                         Endpoint Attributes:
                        cis.common.ep.localurl: http://localhost:8085/sdk
                ...
                Attributes:
                com.vmware.cis.cm.GroupInternalId: com.vmware.vim.vcenter
                com.vmware.cis.cm.ControlScript: service-control-default-vmon
                com.vmware.vim.vcenter.instanceName: vcsa.lab.com.lab.com
                com.vmware.cis.cm.HostId: 7422afcb-316b-4813-aa54-762be0eee476

Environment

VMware vCenter Server 7.0 and later

Cause

This could happen if PNID change has attempted in the past.

Resolution

1. Take Snapshot. If VC is in ELM shutdown all VCs and take offline snapshot.
2. Download and install jxplorer,
   1. https://knowledge.broadcom.com/external/article?legacyId=2146046
3. Connect to vCenter server using JXplorer.
4. Now navigate to Configuration--?Sites-->Expand the current site-->service registration.
5. Look for the service ID found from lstool.py output and search for property where incorrect value is configured and delete the additional local SSO domain name.
   1. 
6. Restart vCenter services using below command.
   1. service-control --stop --all && service-control --start --all