Aria Operations for Networks Does not send Credentials for Principal Identity when used with NSXT Manager added as datasource

Products

• VMware Aria Operations for Networks

Issue/Introduction

When trying to add NSX data source with Principal Identity, credentials are not being passed to NSX.

You will see these errors in the Collector log.

2024-04-04T13:40:13.671Z ERROR dataprovider.utils.HttpUtils collector-process-msg-exec-666 checkStatusAndThrow:41 API /api/v1/node error response {"module_name":"common-services","error_message":"The credentials were incorrect or the account specified has been locked.","error_code":403} 

Errors show in NSX logs

Environment

Aria Operations for Network 6.11
Aria Operations for Network 6.12
Aria Operations for Network 6.12.1
Aria Operations for Network 6.13.0
NSX-T 4.1.2

Cause

When FIPs is enabled in Aria Operations for Networks, it prevents credentials from being passed from the platform to the NSX manager.

Resolution

This is resolved in a future Version 6.14.

As a workaround you can disable FIPs in Aria Operations for Networks. Steps below 

1. Go to Settings > System Configuration.
2. Switch the FIPS Mode For External Connections toggle to False/off.

Hot patch is made available in Version 6.13 to apply. Download the Patch from the attachment section

Patch details:

Patch Download/ Build Number	Download the attached Patch file from this knowledge base article
File Name	VMware-AriaOpNetworks.6.13.0.P1.1722958501.patch.bundle
Size	140 MB
MD5SUM	06b4ccfee93a60f950d2e5934cbf0466
SHA1SUM	7ab2ede5753f65b0b5f030500f2f2fa0e17af3d7
SHA256SUM	856c40041d8a19fb2a373c92731b2175165f5508147a497f5e7ef2df6137abdb

 

Procedure to apply Aria Operation for Networks(vRNI) Patch from GUI:

1. Download the VMware-AriaOpNetworks.6.13.0.P1.1722958501.patch.bundle file from attachment section in this Knowledge Base Article. Save the file on you local system.
2. Log into the vRealize Network Insight UI as an Administrator user.

Note: The default admin@local account can be used.

3. Navigate to Settings > Infrastructure and Support> Infrastructure and Updates  then under Product, select Click here.
4. Click Browse to select the  locally downloaded patch file (VMware-AriaOpNetworks.6.13.0.P1.1722958501.patch.bundle) and click Upload.

Notes:

• When the upload is complete, vRealize Network Insight show the Bundle Upload Complete message notification within 2-3 minutes and the bundle processing happens in the background.
• Until the upload of the package happens, ensure that the session is not closed. If the session ends, you have to restart the upload process.
• Do not refresh the page after bundle upload, until you see the Update Available message notification.

5. In the Bundle Available message notification, click View details.

VMware Aria Operations for Networks (vRNI) Update screen appears.

6. Read the Before you proceed instruction and click Continue.
7. Wait for the pre-checks to complete, which verifies:the disk space, including the space required for migration

• the version
• the NTP sync status
• the bundle checksum

8. Click Install Now.

You can see the approximate time required to complete the update process on your setup.

9. Once the update process begins, the vRealize Network Insight Update screen provides the status of the update process.

Notes:

• If a node becomes inactive, the update process does not continue. The update will not resume until the node becomes active again.
• Once the platforms are updated, you can resume your normal vRealize Network Insight operations even though the collector update happens in parallel. Until the update process is completely over, the Node Version Mismatch detected message is shown in the Install and Support page.

10. Upon the completion of update process, you see the confirmation message.

          All platforms and the collectors nodes are updated.