Global Managers Cannot Connect to Local Managers with General Error 100 and 503 InternalServer and Code 530039

Products

• VMware NSX

Issue/Introduction

In the GM Location "Edit Setting" UI, see the following error:

Error: Communication error occurred with reason 503 InternalServerError (Error code: 530039)

Environment

NSX 4.1.x

Cause

The order of certificates in both the .tomcat_cert.pem and .vip_cert.pem files are wrong. This is due to a software bug that wrongly re-ordered the certificate chain.  

Resolution

This issue is resolved in VMware NSX 4.2.0, available at Broadcom downloads.

If you are having difficulty finding and downloading software, please review the Download Broadcom products and software KB.

Workaround:

SSH as root to NSX manager  and reverse the order of the last 2 certs in the cert chain in the following files:

• /home/secureall/secureall/.store/.tomcat_cert.pem
• /home/secureall/secureall/.store/.vip_cert.pem

The certificate chain order should be as follows:
======
leaf Certificate
ca Certificate
======