MPS Service Deployments Screen Hung When Clicking on "Deploy Service"

Products

• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

When attempting to deploy a service from the Service Deployments screen in NSX Manager, the screen hangs and does not respond. The issue is caused by an expired certificate on the vCenter Server, which prevents the NSX Manager from connecting to the vCenter Server.

We will see the below in /var/log/proton/nsxapi.log :

024-08-30T12:00:37.519Z  INFO http-nio-127.0.0.1-7440-exec-24 UI_LOG 2860629 - [nsx@6876 comp="nsx-manager" level="INFO" reqId="15285dc8-b8aa-4086-a243-012abe34b3e1" subcomp="manager" username="admin"] {"user":"","message":"Api Errors->","messageData":{"headers":{"normalizedNames":{},"lazyUpdate":null},"status":503,"statusText":"OK","url":"https://nsx.xx.xxapi/v1/fabric/compute-collections/73f9384d-d6e0-4d57-ba90-820b4f466dea%3Aresgroup-22483/storage-resources?uniform_cluster_access=true&source=realtime","ok":false,"name":"HttpErrorResponse","message":"Http failure response for https://nsx.xx.xx/api/v1/fabric/compute-collections/73f9384d-d6e0-4d57-ba90-820b4f466dea%3Aresgroup-22483/storage-resources?uniform_cluster_access=true&source=realtime: 503 OK","error":{"details":"Unable to get managed object from reference for compute manager 73f9384d-d6e0-4d57-ba90-820b4f466dea with target type ClusterComputeResource and target id domain-c22482 due to the following errors : value: "Compute Manager vcsa.xx.xx certificate is expired. Please renew it and edit Compute Manager to update its thumbprint in NSX."n; .","httpStatus":"SERVICE_UNAVAILABLE","error_code":7069,"module_name":"inventory-mgmt","error_message":"Error: Unable to get managed object from reference for compute manager 73f9384d-d6e0-4d57-ba90-820b4f466dea with target type ClusterComputeResource and target id domain-c22482 due to the following errors : value: "Compute Manager vcsa.tce.pa certificate is expired. Please renew it and edit Compute Manager to update its thumbprint in NSX."n; . (Error code: 7069)","error_data":{"status":503}}},"level":"Error","browser":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36","time":"Fri Aug 30 2024 08:58:24 GMT-0300 (,"location":"/app/system/home/service-deployments/module/servicedeployments"}

Environment

Can affect any version of NAPP / NSX

Cause

The cause of the issue is an expired certificate on the vCenter Server, which prevents the NSX Manager from connecting to the vCenter Server. 

Resolution

To resolve the issue, follow these steps:

Update the thumbprint of the vCenter Server in the NSX Manager to match the new certificate from the below KB

https://knowledge.broadcom.com/external/article/323341/after-vmware-vcenter-server-certificate.html

Post that Service Deployment Screen will be available for SVM deployment