Symptoms:
- Edge takes long time to complete join management-plane process.
- NSX Manager time is behind Edge.
- Edge syslog shows NSX Manager took long time to connect after join management-plane on Edge.
syslog
2024-08-19T18:57:31.268Z Edge NSX *** - [nsx@*** comp="nsx-edge" subcomp="cli" username="admin" level="INFO"] {***} CMD: join management-plane <MP IP> thumbprint <cert> username admin
...
2024-08-> 20T03:58:15.291Z Edge NSX *** - [nsx@*** comp="nsx-edge" subcomp="nsx-proxy" s2comp="mpa-proxy-lib" tid="***" level="INFO"] ForwardingEngine: ConnectionUp uuid - ***, endpoint - ssl://<MP IP>:1234
- NSX Manager appl-proxy log shows a
'Certificate validation failed'
error and that the connection was established long time later.appl-proxy.log
2024-08-19T09:57:11.473Z NSX Manager NSX *** - [nsx@*** comp="nsx-manager" subcomp="appl-proxy" tid="***" level="INFO"] Received valid certificate -----BEGIN CERTIFICATE-----[...]-----END CERTIFICATE-----#012 in the request with uuid:***
...
2024-08-19T17:36:05.504Z NSX Manager NSX *** - [nsx@*** comp="nsx-manager" subcomp="appl-proxy" s2comp="nsx-net" tid="***" level="ERROR" errorCode="NET1111"] Certificate validation failed: ***-certificate is not yet valid [...]
...2024-08-19T18:57:43.237Z NSX Manager NSX *** - [nsx@*** comp="nsx-manager" subcomp="appl-proxy" tid="***" level="INFO"] TnConnMgr: OnServerConnectionUpDown: ConnInfo:{id: [...] } Status:Up
VMware NSX
The time isn't synchronized between the NSX Manager and the Transport Nodes (ESXi / Edge).
Before executing join management-plane on the Edge side, ensure that the time is synchronized between NSX Manager and Transport Nodes (ESXi / Edge).
Check the clock and NTP server settings by logging into the NSX Manager and NSX Edge nodes with admin privileges and running these commands:
# get clock
# get ntp-server
Note: For changing NTP setting, see Configuring NTP on Appliances and Transport Nodes and Use NTP Servers for Time and Date Synchronization of a Host.
After change NTP time configuration, restart the transport nodes to make sure clock is synchronized with the NTP servers.
For a Bare Metal Edge, set the hardware clock to UTC.