NSX Edge Node Deletion Attempt Fails with Power Off Failed

Products

• VMware NSX

Issue/Introduction

• NSX Manager to Compute Manager (vCenter) connectivity status is DOWN in NSX UI:

Compute Manager 10.##.##.## cannot be connected, as its thumbprint does not match. Please edit compute manager details if thumbprint is changed.

• Edge node deletion fails and configuration state displays Power Off Failed in NSX UI, clicking on Power Off Failed displays the following error:

Connection error for ########-COMP-MANA-####-############. javax.net.ssl.SSLHandshakeException: ####COMPUTE#MANAGER#THUMBPRINT####

• NSX Manager logs contain messages similar to, under /var/log/proton/nsxapi.log:

2024-01-02T03:04:05.006 ERROR ActivityWorkerPool-1-18 EdgeTNDeploymentPlugin 4482 FABRIC [nsx@6876 comp="nsx-manager" errorCode="MP16019" level="ERROR" subcomp="manager"] [entId=EdgeTransportNode//infra/sites/default/enforcement-points/default/edge-transport-node/########-EDGE-####-####-############ Edge node deployment failed due to errorDetails='Connection error for ########-COMP-MANA-####-############. javax.net.ssl.SSLHandshakeException: ####COMPUTE#MANAGER#THUMBPRINT####' 2024-01-02T03:04:05.006 INFO ActivityWorkerPool-1-18 EdgeNodeInstallInfo 4482 FABRIC [nsx@6876 comp="nsx-manager" level="INFO" subcomp="manager"] Node EdgeNodeInstallInfo//infra/sites/default/enforcement-points/default/edge-transport-node/########-EDGE-####-####-############ State: VM_POWER_OFF_FAILED 2024-01-02T03:04:05.006 WARN l3-tasks1 NsxTrustManager 4482 SYSTEM [nsx@6876 comp="nsx-manager" level="WARNING" subcomp="manager"] Thumbprint mismatch for ####COMPUTE#MANAGER#THUMBPRINT#### 2024-01-02T03:04:05.006 ERROR l3-tasks1 VCSoapServiceImpl 4482 FABRIC [nsx@6876 comp="nsx-manager" errorCode="MP228" level="ERROR" subcomp="manager"] Connection error for ########-COMP-MANA-####-############. javax.net.ssl.SSLHandshakeException: ####COMPUTE#MANAGER#THUMBPRINT####

• NSX Manager logs also contain messages similar to, under /var/log/cm-inventory/cm-inventory.log:

2024-01-02T03:04:05.006 INFO inventoryTasksScheduler10 CmPluginStateManager 4404 SYSTEM [nsx@6876 comp="nsx-manager" level="INFO" subcomp="cm-inventory"] Cm Plugin info found for cm ########-COMP-MANA-####-############. Plugin Info:ComputeManagerPluginInfo{id='########-COMP-MANA-####-############', server='10.##.##.##', name='null', description='null', originType='vCenter', version='7.0.3', cmPluginStatus='ComputeManagerPluginStatus{cmId='########-COMP-MANA-####-############'', originType='vCenter', cmConnectionStatus='DOWN', cmConnectionStatusDetails='null', pluginStatus='FAILED', errors='[{"moduleName":"cm-inventory","errorCode":40107,"errorMessage":"Unable to connect to Compute Manager 10.##.##.##. Please edit compute manager details if FQDN or thumbprint is changed. If the issue persists, please check whether the https port 443 and http port 80 are open in the firewall on all NSX nodes."}, {"moduleName":"cm-inventory","errorCode":40118,"errorMessage":"Compute Manager 10.##.##.## can not be connected, as its thumbprint does not match. Please edit compute manager details if thumbprint is changed."}]', warnings='[]'}', additionalInfo='[]'} . Plugin Status : FAILED

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware NSX-T Data Center 3.x

VMware NSX 4.x

Cause

NSX Manager to Compute Manager (vCenter) connectivity status is DOWN due to thumbprint mismatch. This connectivity issue is preventing the power-off and subsequent deletion of the Edge Transport Node VM.

Resolution

Restore NSX Manager to Compute Manager connectivity by following the resolution steps in the article: Restore Compute Manager Connectivity