NSX Edge Node Deletion Attempt Fails with Power Off Failed

Products

• VMware NSX

Issue/Introduction

• NSX Manager to Compute Manager (vCenter) connectivity status is DOWN in NSX UI:

  Compute Manager <Compute Manager IP> cannot be connected, as its thumbprint does not match. Please edit compute manager details if thumbprint is changed.
  Edge node deletion fails and configuration state displays Power Off Failed in NSX UI, clicking on Power Off Failed displays the following error:
  Connection error for ########-###-###-####-############. javax.net.ssl.SSLHandshakeException: <Compute Manager Thumbprint>

• NSX Manager logs may contain entries similar to the below:
  
  /var/log/proton/nsxapi.log

  ERROR ActivityWorkerPool-1-18 EdgeTNDeploymentPlugin 4482 FABRIC [nsx@6876 comp="nsx-manager" errorCode="MP16019" level="ERROR" subcomp="manager"] [entId=EdgeTransportNode//infra/sites/default/enforcement-points/default/edge-transport-node/<Edge TN UUID> Edge node deployment failed due to errorDetails='Connection error for ########-####-####-####-############. javax.net.ssl.SSLHandshakeException: <Compute Manager Thumbprint>'
  INFO ActivityWorkerPool-1-18 EdgeNodeInstallInfo 4482 FABRIC [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Node EdgeNodeInstallInfo//infra/sites/default/enforcement-points/default/edge-transport-node/<Edge TN UUID> State: VM_POWER_OFF_FAILED
  WARN l3-tasks1 NsxTrustManager 4482 SYSTEM [nsx@6876 comp="nsx-manager" level="WARNING" subcomp="manager"] Thumbprint mismatch for <Compute Manager Thumbprint>
  2024-01-02T03:04:05.006 ERROR l3-tasks1 VCSoapServiceImpl 4482 FABRIC [nsx@6876 comp="nsx-manager" errorCode="MP228" level="ERROR" subcomp="manager"] Connection error for ########-####-####-####-############. javax.net.ssl.SSLHandshakeException: <Compute Manager Thumbprint>

  
  /var/log/cm-inventory/cm-inventory.log

  INFO inventoryTasksScheduler10 CmPluginStateManager 4404 SYSTEM [nsx@6876 comp="nsx-manager" level="INFO" subcomp="cm-inventory"] Cm Plugin info found for cm ########-####-####-####-############. Plugin Info:ComputeManagerPluginInfo{id='########-####-####-####-############', server='10.##.##.##', name='null', description='null', originType='vCenter', version='7.0.3', cmPluginStatus='ComputeManagerPluginStatus{cmId='########-####-####-####-############'', originType='vCenter', cmConnectionStatus='DOWN', cmConnectionStatusDetails='null', pluginStatus='FAILED', errors='[{"moduleName":"cm-inventory","errorCode":40107,"errorMessage":"Unable to connect to Compute Manager 10.##.##.##. Please edit compute manager details if FQDN or thumbprint is changed. If the issue persists, please check whether the https port 443 and http port 80 are open in the firewall on all NSX nodes."}, {"moduleName":"cm-inventory","errorCode":40118,"errorMessage":"Compute Manager 10.##.##.## can not be connected, as its thumbprint does not match. Please edit compute manager details if thumbprint is changed."}]', warnings='[]'}', additionalInfo='[]'} . Plugin Status : FAILED

Environment

VMware NSX-T Data Center 3.x

VMware NSX 4.x

Cause

NSX Manager to Compute Manager (vCenter) connectivity status is DOWN due to thumbprint mismatch. This connectivity issue is preventing the power-off and subsequent deletion of the Edge Transport Node VM.

Resolution

Restore NSX Manager to Compute Manager connectivity by following the resolution steps in the article: Restore Compute Manager Connectivity