Global Managers Cannot Connect to Local Managers with General Error 100 and 503 InternalServer and Code 530039

Products

• VMware NSX

Issue/Introduction

In the GM Location "Edit Setting" UI,   see the following error :

Error: Communication error occurred with reason 503 InternalServerError (Error code: 530039)

Environment

NSX 4.1.x

Cause

The order of certificates in both the .tomcat_cert.pem and .vip_cert.pem files are wrong. This is due to a software bug that wrongly re-ordered the certificate chain.  

Resolution

SSH as root to NSX manager  and reverse the order of the last 2 certs in the cert chain in the following files:

• /home/secureall/secureall/.store/.tomcat_cert.pem
• /home/secureall/secureall/.store/.vip_cert.pem

The certificate chain order should be as follows:
======
leaf Certificate
ca Certificate
======

Additional Information

This issue is resolved in NSX 4.2