vSAN cluster Shutdown fails with "Disconnected host found from orch <IP>" in the vSphere UI

Products

• VMware vSAN

Issue/Introduction

1) vSAN cluster shutdown though the vCenter UI fails on the below step and the following error:

Disable cluster membership updates from vCenter Server for all hosts in this cluster.

Error: "Disconnected host found from orch <vSAN IP address of host>"

 

 

2) If attempting the manual vSAN cluster shutdown as outlined in the following document: Manually Shut Down and Restart the vSAN Cluster

This also fails on Step (i) (python /usr/lib/vmware/vsan/bin/reboot_helper.py prepare) with the error outlined below:

Error:root:Failed to test vsan vmodl version with error (SSL: CERTIFICATE_VERIFY_FAILED) certificate verify failed: certificate has expired (_ssl.c:1125) on <vSAN IP address>

Cause

Issue is caused by expired host certificates:

Resolution

If the host is using a VMCA self signed cert, renew the cert using the steps below:

Identify the Hosts with expired certificates via the vSphere client by clicking on the Host > Configure >  Certificates > Renew Certificates